VULNERABILITY INTELLIGENCE

CVE-2008-4968

CVSS score6.9 MEDIUM

EPSS probability0.41%

CISA KEVNot currently listed

Published2008-11-06

Last modified2026-06-16

Description

The (1) rccs and (2) STUFF scripts in lmbench 3.0-a7 allow local users to overwrite arbitrary files via a symlink attack on a /tmp/sdiff.##### temporary file.