Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 08:05:14 +0000 BELL-CVE-2008-5135 https://cve.radiocsirt.org/vuln/bell-cve-2008-5135 <p><strong>Affected:</strong> Alpaquita:23: os-prober, Alpaquita:stream: os-prober</p> <p><strong>Affected:</strong> Alpaquita:23: os-prober, Alpaquita:stream: os-prober</p> https://cve.radiocsirt.org/vuln/bell-cve-2008-5135 EUVD-2026-164220 https://cve.radiocsirt.org/vuln/euvd-2026-164220 EUVD-2026-164220 https://cve.radiocsirt.org/vuln/euvd-2026-164220 fkie_cve-2008-5135 https://cve.radiocsirt.org/vuln/fkie_cve-2008-5135 <p>os-prober in os-prober 1.17 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/mounted-map or (2) /tmp/raided-map temporary file. NOTE: the vendor disputes this issue, stating &#34;the insecure code path should only ever run inside a d-i environment, which has no non-root users.</p> <p>os-prober in os-prober 1.17 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/mounted-map or (2) /tmp/raided-map temporary file. NOTE: the vendor disputes this issue, stating &#34;the insecure code path should only ever run inside a d-i environment, which has no non-root users.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2008-5135 GHSA-6jcp-4mfr-qvpm https://cve.radiocsirt.org/vuln/ghsa-6jcp-4mfr-qvpm <p>** DISPUTED ** os-prober in os-prober 1.17 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/mounted-map or (2) /tmp/raided-map temporary file. NOTE: the vendor disputes this issue, stating &#34;the insecure code path should only ever run inside a d-i environment, which has no non-root users.&#34;</p> <p>** DISPUTED ** os-prober in os-prober 1.17 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/mounted-map or (2) /tmp/raided-map temporary file. NOTE: the vendor disputes this issue, stating &#34;the insecure code path should only ever run inside a d-i environment, which has no non-root users.&#34;</p> https://cve.radiocsirt.org/vuln/ghsa-6jcp-4mfr-qvpm gsd-2008-5135 https://cve.radiocsirt.org/vuln/gsd-2008-5135 gsd-2008-5135 https://cve.radiocsirt.org/vuln/gsd-2008-5135