CVE-2008-4936
faxspool in mgetty 1.1.36 allows local users to overwrite arbitrary files via a symlink attack on...
CVE-2008-4936 is a medium vulnerability (CVSS 6.9) in Gert Doering Mgetty, published November 5, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.41%, the 36th percentile. Fixed in mgetty 1.1.36-1.3.
- Severity
- 6.9 MediumCVSS 2.0, NVD
- Exploit chance
- 0.41%EPSS, 36th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
1.1.36-1.3mgetty +3 more
Description
faxspool in mgetty 1.1.36 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/faxsp.##### temporary file.
Exploit likelihood
Affected products
Affected packages
What each source reports
NVD Score used
faxspool in mgetty 1.1.36 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/faxsp.##### temporary file.
- Record
CVE-2008-4936- CVSS 2.0
- 6.9 Medium
AV:L/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-59
- Updated
- 2026-11-02
CVE ListNo score
faxspool in mgetty 1.1.36 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/faxsp.##### temporary file.
- Record
CVE-2008-4936- Updated
- 2026-11-02
EUVDEUVD-2008-4915No score
faxspool in mgetty 1.1.36 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/faxsp.##### temporary file.
- Record
EUVD-2008-4915- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9r8x-j9wv-wvqvNo score
faxspool in mgetty 1.1.36 allows local users to overwrite arbitrary files via a symlink attack on...
faxspool in mgetty 1.1.36 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/faxsp.##### temporary file.
- Record
GHSA-9r8x-j9wv-wvqv- Weakness
- CWE-59
- Updated
- 2026-11-02
OSVNo score
faxspool in mgetty 1.1.36 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/faxsp.##### temporary file.
- Record
CVE-2008-4936- Updated
- 2026-11-02
OSVDEBIAN-CVE-2008-4936No score
faxspool in mgetty 1.1.36 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/faxsp.##### temporary file.
- Record
DEBIAN-CVE-2008-4936- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11047-1No score
g3utils-1.2.1-6.2 on GA media
These are all security issues fixed in the g3utils-1.2.1-6.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11047-1- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
bugs.gentoo.org/show_bug.cgi?id=235806
openwall.com/lists/oss-security/2008/10/30/2
exchange.xforce.ibmcloud.com/vulnerabilities/44833
uvw.ru/report.lenny.txt
dev.gentoo.org/~rbu/security/debiantemp/mgetty-fax
Show 12 moreShow less
secunia.com/advisories/33051
bugs.debian.org/496403
securityfocus.com/bid/30927
security.gentoo.org/glsa/glsa-200812-08.xml
nvd.nist.gov/vuln/detail/CVE-2008-4936
github.com/advisories/GHSA-9r8x-j9wv-wvqv
security-tracker.debian.org/tracker/CVE-2008-4936
suse.com/security/cve/CVE-2008-4936