CVE-2008-5141

flamethrower 0.1.8 - Local Privilege Escalation

Title source: llm
STIX 2.1

Description

flamethrower in flamethrower 0.1.8 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/multicast.tar.##### temporary file.

References (7)

Core 7
Core References
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2008/dsa-1676
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/32386
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/32891
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/46717
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/32961
Mailing List mailing-list x_refsource_mlist
http://lists.debian.org/debian-devel/2008/08/msg00285.html

Scores

EPSS 0.0031
EPSS Percentile 22.2%

Details

CWE
CWE-59
Status published
Products (1)
dann_frazier/flamethrower 0.1.8
Published Nov 18, 2008
Tracked Since Feb 18, 2026