CVE-2008-4553
published 2008-10-15CVE-2008-4553: qemu-make-debian-root in qemu 0.9.1-5 on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on temporary files and…
PriorityP424high7.2CVSS 2.0
AVLACLAuNCCICAC
EPSS
0.49%
39.1th percentile
qemu-make-debian-root in qemu 0.9.1-5 on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on temporary files and directories.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | qemu | < qemu 0.9.1-6 (bookworm) | qemu 0.9.1-6 (bookworm) |
| qemu | qemu | — | — |
| qemu | qemu | >= 0 < 0.9.1-6 | 0.9.1-6 |
| qemu | qemu | >= 0 < 0.9.1-6 | 0.9.1-6 |
| qemu | qemu | >= 0 < 0.9.1-6 | 0.9.1-6 |
| qemu | qemu | >= 0 < 0.9.1-6 | 0.9.1-6 |
CVSS provenance
nvdv2.07.2HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
osv7.2HIGH
vendor_debian7.2LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-5642-4rj6-w59m: qemu-make-debian-root in qemu 0
ghsa_unreviewed·2022-05-02
CVE-2008-4553 [HIGH] CWE-59 GHSA-5642-4rj6-w59m: qemu-make-debian-root in qemu 0
qemu-make-debian-root in qemu 0.9.1-5 on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on temporary files and directories.
OSV
CVE-2008-4553: qemu-make-debian-root in qemu 0
osv·2008-10-15·CVSS 7.2
CVE-2008-4553 [HIGH] CVE-2008-4553: qemu-make-debian-root in qemu 0
qemu-make-debian-root in qemu 0.9.1-5 on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on temporary files and directories.
Debian
CVE-2008-4553: qemu - qemu-make-debian-root in qemu 0.9.1-5 on Debian GNU/Linux allows local users to ...
vendor_debian·2008·CVSS 7.2
CVE-2008-4553 [HIGH] CVE-2008-4553: qemu - qemu-make-debian-root in qemu 0.9.1-5 on Debian GNU/Linux allows local users to ...
qemu-make-debian-root in qemu 0.9.1-5 on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on temporary files and directories.
Scope: local
bookworm: resolved (fixed in 0.9.1-6)
bullseye: resolved (fixed in 0.9.1-6)
forky: resolved (fixed in 0.9.1-6)
sid: resolved (fixed in 0.9.1-6)
trixie: resolved (fixed in 0.9.1-6)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496394http://dev.gentoo.org/~rbu/security/debiantemp/qemuhttp://secunia.com/advisories/32335http://uvw.ru/report.lenny.txthttp://www.debian.org/security/2008/dsa-1657http://www.openwall.com/lists/oss-security/2008/10/13/2http://www.openwall.com/lists/oss-security/2008/10/14/4http://www.openwall.com/lists/oss-security/2008/10/30/2http://www.securityfocus.com/bid/30931https://bugs.gentoo.org/show_bug.cgi?id=235770https://bugs.gentoo.org/show_bug.cgi?id=235826https://exchange.xforce.ibmcloud.com/vulnerabilities/44831http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496394http://dev.gentoo.org/~rbu/security/debiantemp/qemuhttp://secunia.com/advisories/32335http://uvw.ru/report.lenny.txthttp://www.debian.org/security/2008/dsa-1657http://www.openwall.com/lists/oss-security/2008/10/13/2http://www.openwall.com/lists/oss-security/2008/10/14/4http://www.openwall.com/lists/oss-security/2008/10/30/2http://www.securityfocus.com/bid/30931https://bugs.gentoo.org/show_bug.cgi?id=235770https://bugs.gentoo.org/show_bug.cgi?id=235826https://exchange.xforce.ibmcloud.com/vulnerabilities/44831
2008-10-15
Published