CVE-2008-4937

senddoc in OpenOffice.org (OOo) 2.4.1 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/log.obr.##### temporary file.

• CWE-59

• http://bugs.debian.org/496361
• http://dev.gentoo.org/~rbu/security/debiantemp/openoffice.org-commonExploit
• http://secunia.com/advisories/32856Vendor Advisory
• http://secunia.com/advisories/33140Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200812-13.xml
• http://uvw.ru/report.lenny.txt
• http://www.mandriva.com/security/advisories?name=MDVSA-2009:070
• http://www.openwall.com/lists/oss-security/2008/10/30/2
• http://www.securityfocus.com/bid/30925
• http://www.ubuntu.com/usn/usn-677-1
• http://www.ubuntu.com/usn/usn-677-2
• https://bugs.gentoo.org/235824
• https://bugs.gentoo.org/show_bug.cgi?id=235770
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44829
• http://bugs.debian.org/496361
• http://dev.gentoo.org/~rbu/security/debiantemp/openoffice.org-commonExploit
• http://secunia.com/advisories/32856Vendor Advisory
• http://secunia.com/advisories/33140Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200812-13.xml
• http://uvw.ru/report.lenny.txt
• http://www.mandriva.com/security/advisories?name=MDVSA-2009:070
• http://www.openwall.com/lists/oss-security/2008/10/30/2
• http://www.securityfocus.com/bid/30925
• http://www.ubuntu.com/usn/usn-677-1
• http://www.ubuntu.com/usn/usn-677-2
• https://bugs.gentoo.org/235824
• https://bugs.gentoo.org/show_bug.cgi?id=235770
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44829

Published

Nov 5, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-4931Cross-site scripting (XSS) vulnerability in the account modu…
• CVE-2008-4932webmail/modules/filesystem/edit.php in U-Mail Webmail server…
• CVE-2008-4933Buffer overflow in the hfsplus_find_cat function in fs/hfspl…
• CVE-2008-4934The hfsplus_block_allocate function in fs/hfsplus/bitmap.c i…
• CVE-2008-4935asciiview in aview 1.3.0 allows local users to overwrite arb…
• CVE-2008-4936faxspool in mgetty 1.1.36 allows local users to overwrite ar…
• CVE-2008-4938aegis 4.24 and aegis-web 4.24 allow local users to overwrite…
• CVE-2008-4939apertium 3.0.7 allows local users to overwrite arbitrary fil…
• CVE-2008-4940xmlfile.py in aptoncd 0.1 allows local users to overwrite ar…
• CVE-2008-4941arb-common 0.0.20071207.1 allows local users to overwrite ar…
• CVE-2008-4942audiolink in audiolink 0.05 allows local users to overwrite …
• CVE-2008-4943bulmages-servers 0.11.1 allows local users to overwrite arbi…