CVE-2008-4978
Last modified
CVE-2008-4978 is a vulnerability of currently unknown severity. radiance 3R9+20080530 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/opt.fmt, (b) /tmp/out#####.fmt, (c) /tmp/tf#####.dat, (d) /tmp/gsf#####, (e) /tmp/sc#####.sh, (f) /tmp/il#####.pic, (g) /tmp/tl#####.pic, (h) /tmp/ds#####.pic, (i) /tmp/tfa#####, and (j) /tmp/sed##### temporary files, related to the (1) optics2rad, (2) pdelta, (3) dayfact, and (4) raddepend scripts.. EPSS estimates a 0.39% chance of exploitation in the next 30 days.
Description
radiance 3R9+20080530 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/opt.fmt, (b) /tmp/out#####.fmt, (c) /tmp/tf#####.dat, (d) /tmp/gsf#####, (e) /tmp/sc#####.sh, (f) /tmp/il#####.pic, (g) /tmp/tl#####.pic, (h) /tmp/ds#####.pic, (i) /tmp/tfa#####, and (j) /tmp/sed##### temporary files, related to the (1) optics2rad, (2) pdelta, (3) dayfact, and (4) raddepend scripts.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Radiance | Radiance | 3 | R9 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2008-4978?
How severe is CVE-2008-4978?
How do I fix CVE-2008-4978?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2008
- CVE-2008-4972mailgo in mgt 2.31 allows local users to overwrite arbitrary…
- CVE-2008-4973i2myspell in myspell 3.1 allows local users to overwrite arb…
- CVE-2008-4974rrdedit in netmrg 0.20 allows local users to overwrite arbit…
- CVE-2008-4975mkmailpost in newsgate 1.6 allows local users to overwrite a…
- CVE-2008-4976ogle 0.9.2 and ogle-mmx 0.9.2 allow local users to overwrite…
- CVE-2008-4977postfix_groups.pl in Postfix 2.5.2 allows local users to ove…
- CVE-2008-4979getipacctg in rancid 2.3.2~a8 allows local users to overwrit…
- CVE-2008-4980delqueueask in rccp 0.9 allows local users to overwrite arbi…
- CVE-2008-4981perl.robot in realtimebattle 1.0.8 allows local users to ove…
- CVE-2008-4982rkhunter in rkhunter 1.3.2 allows local users to overwrite a…
- CVE-2008-4983scilab-bin 4.1.2 allows local users to overwrite arbitrary f…
- CVE-2008-4984scratchbox2 1.99.0.24 allows local users to overwrite arbitr…
Are you affected by CVE-2008-4978?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST