VULNERABILITY INTELLIGENCE

CVE-2008-2958

CVSS score4.4 MEDIUM
EPSS probability0.28%
CISA KEVNot currently listed
Published2008-07-01
Last modified2026-06-16
CVSS vectorAV:L/AC:M/Au:N/C:P/I:P/A:P

Description

Race condition in (1) checkinstall 1.6.1 and (2) installwatch allows local users to overwrite arbitrary files and have other impacts via symlink and possibly other attacks on temporary working directories.

Weakness classification

  • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Primary references