Every CVESearch/Get API key

CVE-2008-5146

add-accession-numbers in ctn 3.0.6 allows local users to overwrite arbitrary files via a symlink...

6.9 Medium

CVE-2008-5146 is a medium vulnerability (CVSS 6.9) in Erl Wustl Ctn, published November 18, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.45%, the 39th percentile. No source names a fixed version.

What does this mean?
Severity
6.9 MediumCVSS 2.0, NVD
Exploit chance
0.45%EPSS, 39th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
No fix listedNo source names one

Description

add-accession-numbers in ctn 3.0.6 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/accession temporary file.

Exploit likelihood

0.45%Down 0.4 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
ctn
Debian:12
All versions, plus listed versions
3.2.0~dfsg-103.2.0~dfsg-73.2.0~dfsg-7.13.2.0~dfsg-83.2.0~dfsg-9
None known
ctn
Debian:13
All versions, plus listed versions
3.2.0~dfsg-103.2.0~dfsg-83.2.0~dfsg-9
None known
ctn
Debian:14
All versions, plus listed versions
3.2.0~dfsg-103.2.0~dfsg-83.2.0~dfsg-9
None known
ctn
Ubuntu:16.04:LTS
All versions, plus listed versions
3.2.0~dfsg-23.2.0~dfsg-33.2.0~dfsg-3build1
None known
ctn
Ubuntu:18.04:LTS
All versions, plus listed versions
3.2.0~dfsg-53.2.0~dfsg-5build1
None known
ctn
Ubuntu:20.04:LTS
All versions, plus listed versions
3.2.0~dfsg-6build3
None known
ctn
Ubuntu:22.04:LTS
All versions, plus listed versions
3.2.0~dfsg-7
None known
ctn
Ubuntu:24.04:LTS
All versions, plus listed versions
3.2.0~dfsg-73.2.0~dfsg-7build13.2.0~dfsg-7.1
None known
ctn
Ubuntu:25.10
All versions, plus listed versions
3.2.0~dfsg-8build13.2.0~dfsg-9
None known
ctn
Ubuntu:26.10
All versions, plus listed versions
3.2.0~dfsg-9build13.2.0~dfsg-10
None known
ctn
Ubuntu:26.04:LTS
All versions, plus listed versions
3.2.0~dfsg-93.2.0~dfsg-9build1
None known

What each source reports

NVD Score used6.9

add-accession-numbers in ctn 3.0.6 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/accession temporary file.

Record
CVE-2008-5146
CVSS 2.0
6.9 MediumAV:L/AC:M/Au:N/C:C/I:C/A:C
Weakness
CWE-59
Updated
2026-11-02
CVE ListNo score

add-accession-numbers in ctn 3.0.6 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/accession temporary file.

Record
CVE-2008-5146
Updated
2026-11-02
EUVDEUVD-2008-5125No score

add-accession-numbers in ctn 3.0.6 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/accession temporary file.

Record
EUVD-2008-5125
Updated
2026-11-03
GitHub AdvisoriesGHSA-qr39-8j6p-v6qpNo score

add-accession-numbers in ctn 3.0.6 allows local users to overwrite arbitrary files via a symlink...

add-accession-numbers in ctn 3.0.6 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/accession temporary file.

Record
GHSA-qr39-8j6p-v6qp
Weakness
CWE-59
Updated
2026-11-02
OSVNo score

add-accession-numbers in ctn 3.0.6 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/accession temporary file.

Record
CVE-2008-5146
Updated
2026-11-02
OSVDEBIAN-CVE-2008-5146No score

add-accession-numbers in ctn 3.0.6 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/accession temporary file.

Record
DEBIAN-CVE-2008-5146
Updated
2026-11-02
OSVUBUNTU-CVE-2008-5146No score

add-accession-numbers in ctn 3.0.6 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/accession temporary file.

Record
UBUNTU-CVE-2008-5146
Updated
2026-11-02

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open