CVE-2008-2266

published 2008-05-16

CVE-2008-2266: uulib/uunconc.c in UUDeview 0.5.20, as used in nzbget before 0.3.0 and possibly other products, allows local users to overwrite arbitrary files via a symlink…

Priority P4 13 medium 4.4 CVSS 2.0

AV L AC M Au N C P I P A P

uulib/uunconc.c in UUDeview 0.5.20, as used in nzbget before 0.3.0 and possibly other products, allows local users to overwrite arbitrary files via a symlink attack on a temporary filename generated by the tempnam function. NOTE: this may be a CVE-2004-2265 regression.

Affected

14 ranges

Vendor	Product	Version range	Fixed in
debian	libconvert-uulib-perl	< uudeview 0.5.20-3.1 (bookworm)	uudeview 0.5.20-3.1 (bookworm)
debian	pan	< uudeview 0.5.20-3.1 (bookworm)	uudeview 0.5.20-3.1 (bookworm)
debian	uudeview	< uudeview 0.5.20-3.1 (bookworm)	uudeview 0.5.20-3.1 (bookworm)
nzbget	nzbget	<= 0.2.2	—
nzbget	nzbget	—	—
nzbget	nzbget	—	—
nzbget	nzbget	—	—
nzbget	nzbget	—	—
nzbget	nzbget	—	—
uudeview	uudeview	—	—
uudeview	uudeview	>= 0 < 0.5.20-3.1	0.5.20-3.1
uudeview	uudeview	>= 0 < 0.5.20-3.1	0.5.20-3.1
uudeview	uudeview	>= 0 < 0.5.20-3.1	0.5.20-3.1
uudeview	uudeview	>= 0 < 0.5.20-3.1	0.5.20-3.1

CVSS provenance

nvd v2.0 4.4 MEDIUM AV:L/AC:M/Au:N/C:P/I:P/A:P

osv 7.2 HIGH

vendor_debian 7.2 LOW

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-59