CVE-2008-5141

flamethrower in flamethrower 0.1.8 allows local users to overwrite arbitrary files via a symlink...

6.9 MediumFix available

CVE-2008-5141 is a medium vulnerability (CVSS 6.9) in Dann Frazier Flamethrower, published November 18, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.31%, the 23rd percentile. Fixed in flamethrower 0.1.8-2.

What does this mean?

Severity: 6.9 MediumCVSS 2.0, NVD
Exploit chance: 0.31%EPSS, 23rd percentile
Exploitation: None knownNot on CISA’s or ENISA’s lists
Fixed in: 0.1.8-2flamethrower +3 more

Description

flamethrower in flamethrower 0.1.8 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/multicast.tar.##### temporary file.

Exploit likelihood

0.31%Down 0.7 points since Feb 4, 2022

Affected products

dann frazier flamethrower

Affected packages

Affected packages
Package	Affected	Fixed
`flamethrower` Debian:12	before 0.1.8-2	0.1.8-2
`flamethrower` Debian:13	before 0.1.8-2	0.1.8-2
`flamethrower` Debian:14	before 0.1.8-2	0.1.8-2
`flamethrower` Debian:4.0	before 0.1.8-1+etch1, plus listed versions 0.1.8-1	0.1.8-1+etch1

What each source reports

NVD Score used6.9

flamethrower in flamethrower 0.1.8 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/multicast.tar.##### temporary file.

Record: CVE-2008-5141
CVSS 2.0: 6.9 MediumAV:L/AC:M/Au:N/C:C/I:C/A:C
Weakness: CWE-59
Updated: 2026-11-02

CVE ListNo score

flamethrower in flamethrower 0.1.8 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/multicast.tar.##### temporary file.

Record: CVE-2008-5141
Updated: 2026-11-02

EUVDEUVD-2008-5120No score

flamethrower in flamethrower 0.1.8 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/multicast.tar.##### temporary file.

Record: EUVD-2008-5120
Updated: 2026-11-03

GitHub AdvisoriesGHSA-v5p6-jx3j-whpjNo score

flamethrower in flamethrower 0.1.8 allows local users to overwrite arbitrary files via a symlink...

flamethrower in flamethrower 0.1.8 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/multicast.tar.##### temporary file.

Record: GHSA-v5p6-jx3j-whpj
Weakness: CWE-59
Updated: 2026-11-02

OSVNo score

flamethrower in flamethrower 0.1.8 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/multicast.tar.##### temporary file.

Record: CVE-2008-5141
Updated: 2026-11-02

OSVDEBIAN-CVE-2008-5141No score

flamethrower in flamethrower 0.1.8 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/multicast.tar.##### temporary file.

Record: DEBIAN-CVE-2008-5141
Updated: 2026-11-02

History

History
Recorded	Changed	Sources
Nov 10, 2026	facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 4 moreShow less