CVE-2008-5145 ltpmenu in ltp 20060918 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/runltp.mainmenu.##### temporary file.

MediumCVSS 6.9 EPSS 0.29%

Published: 2008-11-18 17:00
Updated: 2026-06-17 01:59
Exploit status: No public exploit known

Sign in for asset impact Search another CVE

Description

ltpmenu in ltp 20060918 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/runltp.mainmenu.##### temporary file.

Affected products

Product	Affected versions	Fixed in
debian ltp	= 20060918	No fix listed

References

[debian-devel] 20080811 Re: Possible mass bug filing: The possibility of attack with the help of symlinks in some Debian packages mailing-list
32414 vdb-entry
ltp-ltpmenu-symlink(46715) vdb-entry

CVSS v2.0

6.9 Medium

AV:L/AC:M/Au:N/C:C/I:C/A:C

Access Vector: Local
Access Complexity: Medium
Authentication: None
Confidentiality: Complete
Integrity: Complete
Availability: Complete

Weakness & likelihood

EPSS (exploitation probability, 30 days): 0.29% (percentile 21.4)
CWE: CWE-59

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.