CVE-2008-5374 in bash-doc

Summary

bash-doc 3.2 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/cb#####.? temporary file, related to the (1) aliasconv.sh, (2) aliasconv.bash, and (3) cshtobash scripts.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Reservation: 12/08/2008
• Disclosure: 12/08/2008
• Moderation: VulDB entry created
• Entries: 1: VDB-45333
• CPE: ready
• CWE: CWE-59 (Confirmed)
• CVSS: 8.4
• EPSS: 0.00054
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2008-5374
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2008-5374
• CVE Details: https://www.cvedetails.com/cve/CVE-2008-5374/