CVE-2008-4108

Publication date 18 September 2008

Last updated 24 July 2024

Ubuntu priority

Tools/faqwiz/move-faqwiz.sh (aka the generic FAQ wizard moving tool) in Python 2.4.5 might allow local users to overwrite arbitrary files via a symlink attack on a tmp$RANDOM.tmp temporary file. NOTE: there may not be common usage scenarios in which tmp$RANDOM.tmp is located in an untrusted directory.

Read the notes from the security team

Status

Show unmaintained releases

Package	Ubuntu Release	Status
python2.4	12.04 LTS precise	Not in release
	11.10 oneiric	Not in release
	11.04 natty	Not in release
	10.10 maverick	Not in release
	10.04 LTS lucid	Not in release
	9.10 karmic	Not affected
	8.04 LTS hardy	Ignored
	6.06 LTS dapper	Ignored
python2.5	12.04 LTS precise	Not in release
	11.10 oneiric	Not in release
	11.04 natty	Not in release
	10.10 maverick	Not in release
	10.04 LTS lucid	Not in release
	9.10 karmic	Not affected
	8.04 LTS hardy	Ignored
	6.06 LTS dapper	Not in release
python2.6	12.04 LTS precise	Not in release
	11.10 oneiric	Not affected
	11.04 natty	Not affected
	10.10 maverick	Not affected
	10.04 LTS lucid	Not affected
	9.10 karmic	Not affected
	8.04 LTS hardy	Not in release
	6.06 LTS dapper	Not in release

CVE-2008-4108

Status

Notes

mdeslaur

jdstrand

References

Other references