CVE-2008-5394: High severity shadow-utils vulnerability
/bin/login in shadow 4.0.18.1 in Debian GNU/Linux, and probably other Linux distributions, allows local users in the utmp group to overwrite arbitrary files via a symlink attack on a temporary file referenced in a line (aka utline) field in a utmp entry.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-5394?
CVE-2008-5394 is considered a high severity vulnerability due to its potential for local privilege escalation.
How do I fix CVE-2008-5394?
To fix CVE-2008-5394, upgrade to the latest version of the shadow package that addresses this vulnerability.
Who is affected by CVE-2008-5394?
CVE-2008-5394 affects local users in the utmp group on systems running shadow version 4.0.18.1 and possibly other versions.
What type of attack does CVE-2008-5394 involve?
CVE-2008-5394 involves a symlink attack that allows overwriting of arbitrary files.
What is the impact of CVE-2008-5394?
The impact of CVE-2008-5394 is that it may allow unauthorized users to gain access to sensitive files on the system.