CVE-2008-3278

frysk packages through 2008-08-05 as shipped in Red Hat Enterprise Linux 5 are built with an insecure RPATH set in the ELF header of multiple binaries in /usr/bin/f* (e.g. fcore, fcatch, fstack, fstep, ...) shipped in the package. A local attacker can exploit this vulnerability by running arbitrary code as another user.

• CWE-1188

• https://access.redhat.com/security/cve/cve-2008-3278Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2008-3278Issue Tracking, Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2008-3278Third Party Advisory
• https://access.redhat.com/security/cve/cve-2008-3278Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2008-3278Issue Tracking, Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2008-3278Third Party Advisory

Published

Nov 7, 2019

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-3272The snd_seq_oss_synth_make_info function in sound/core/seq/o…
• CVE-2008-3273JBoss Enterprise Application Platform (aka JBossEAP or EAP) …
• CVE-2008-3274The default configuration of Red Hat Enterprise IPA 1.0.0 an…
• CVE-2008-3275The (1) real_lookup and (2) __lookup_hash functions in fs/na…5.5
• CVE-2008-3276Integer overflow in the dccp_setsockopt_change function in n…
• CVE-2008-3277Untrusted search path vulnerability in a certain Red Hat bui…
• CVE-2008-3279Untrusted search path vulnerability in libbrlttybba.so in br…
• CVE-2008-3280It was found that various OpenID Providers (OPs) had TLS Ser…5.9
• CVE-2008-3281libxml2 2.6.32 and earlier does not properly detect recursio…6.5
• CVE-2008-3282Integer overflow in the rtl_allocateMemory function in sal/r…7.8
• CVE-2008-3283Multiple memory leaks in Red Hat Directory Server 7.1 before…
• CVE-2008-3284Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…