Every CVESearch/Get API key

CVE-2008-5379

netdisco-mibs-installer 1.0 allows local users to overwrite arbitrary files via a symlink attack...

6.9 Medium

CVE-2008-5379 is a medium vulnerability (CVSS 6.9) in Oliver Gorwits Netdisco Mibs Installer, published December 8, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.35%, the 29th percentile. No source names a fixed version.

What does this mean?
Severity
6.9 MediumCVSS 2.0, NVD
Exploit chance
0.35%EPSS, 29th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
No fix listedNo source names one

Description

netdisco-mibs-installer 1.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/netdisco-mibs-0.6.tar.gz temporary file, related to the (1) netdisco-mibs-install and (2) netdisco-mibs-download scripts.

Exploit likelihood

0.35%Down 0.5 points since Feb 4, 2022
90%50%10%1%

Affected products

What each source reports

NVD Score used6.9

netdisco-mibs-installer 1.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/netdisco-mibs-0.6.tar.gz temporary file, related to the (1) netdisco-mibs-install and (2) netdisco-mibs-download scripts.

Record
CVE-2008-5379
CVSS 2.0
6.9 MediumAV:L/AC:M/Au:N/C:C/I:C/A:C
Weakness
CWE-59
Updated
2026-11-02
CVE ListNo score

netdisco-mibs-installer 1.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/netdisco-mibs-0.6.tar.gz temporary file, related to the (1) netdisco-mibs-install and (2) netdisco-mibs-download scripts.

Record
CVE-2008-5379
Updated
2026-11-02
EUVDEUVD-2008-5356No score

netdisco-mibs-installer 1.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/netdisco-mibs-0.6.tar.gz temporary file, related to the (1) netdisco-mibs-install and (2) netdisco-mibs-download scripts.

Record
EUVD-2008-5356
Updated
2026-11-03
GitHub AdvisoriesGHSA-f73c-q373-6xfcNo score

netdisco-mibs-installer 1.0 allows local users to overwrite arbitrary files via a symlink attack...

netdisco-mibs-installer 1.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/netdisco-mibs-0.6.tar.gz temporary file, related to the (1) netdisco-mibs-install and (2) netdisco-mibs-download scripts.

Record
GHSA-f73c-q373-6xfc
Weakness
CWE-59
Updated
2026-11-02

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

MoveEnter Open