CVE-2008-5149
fwd_check.sh in libncbi6 6.1.20080302 allows local users to overwrite arbitrary files via a...
fwd_check.sh in libncbi6 6.1.20080302 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/##### temporary file.
Exploit likelihood
What each source reports
NVD Score used
fwd_check.sh in libncbi6 6.1.20080302 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/##### temporary file.
- Record
CVE-2008-5149- CVSS 2.0
- 6.9 Medium
AV:L/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-59
- Updated
- 2026-11-02
CVE List No score
fwd_check.sh in libncbi6 6.1.20080302 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/##### temporary file.
- Record
CVE-2008-5149- Updated
- 2026-11-02
EUVDEUVD-2008-5128 No score
fwd_check.sh in libncbi6 6.1.20080302 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/##### temporary file.
- Record
EUVD-2008-5128- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-38x8-c7cg-pg87 No score
fwd_check.sh in libncbi6 6.1.20080302 allows local users to overwrite arbitrary files via a...
fwd_check.sh in libncbi6 6.1.20080302 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/##### temporary file.
- Record
GHSA-38x8-c7cg-pg87- Weakness
- CWE-59
- Updated
- 2026-11-02
OSV No score
fwd_check.sh in libncbi6 6.1.20080302 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/##### temporary file.
- Record
CVE-2008-5149- Updated
- 2026-11-02
OSVDEBIAN-CVE-2008-5149 No score
fwd_check.sh in libncbi6 6.1.20080302 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/##### temporary file.
- Record
DEBIAN-CVE-2008-5149- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ncbi-tools6Debian:12 |
before 6.1.20080302-4 | 6.1.20080302-4 |
ncbi-tools6Debian:13 |
before 6.1.20080302-4 | 6.1.20080302-4 |
ncbi-tools6Debian:14 |
before 6.1.20080302-4 | 6.1.20080302-4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-5149 is a medium vulnerability (CVSS 6.9) in Aucko Libncbi6, published November 18, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.36%, the 30th percentile. Fixed in ncbi-tools6 6.1.20080302-4.