Unscored severity · published Sep 29, 2008
CVE-2008-3524
rc.sysinit in initscripts before 8.76.3-1 on Fedora 9 and other Linux platforms allows local users to delete arbitrary files via a symlink attack on a file or directory under (1)…
–
CVSS
0.3%
EPSS
No
On KEV
Description
rc.sysinit in initscripts before 8.76.3-1 on Fedora 9 and other Linux platforms allows local users to delete arbitrary files via a symlink attack on a file or directory under (1) /var/lock or (2) /var/run.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 28% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FE
Fedora · Redhat
9 · source: NVD
IN
Initscripts · Redhat
8.76.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-3524
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-3524
Vendor Advisory
http://secunia.com/advisories/32037
secunia.com
http://secunia.com/advisories/32710
wiki.rpath.com
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0318
www.securityfocus.com
http://www.securityfocus.com/bid/31385
bugzilla.redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=458504
bugzilla.redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=458652
More from Fedora
5.5
CVE-2018-19139
An issue has been found in JasPer 2.0.14
–
CVE-2011-1011
The seunshare_mount function in sandbox/seunshare.c in seunshare in certain Red Hat packages of policycoreutils 2.0.83 and earlier in Red Hat Enterprise Linux (RHEL) 6 and…
–
CVE-2009-3080
Array index error in the gdth_read_event function in drivers/scsi/gdth.c in the Linux kernel before 2.6.32-rc8 allows local users to cause a denial of service or possibly gain…
–
CVE-2009-1573
xvfb-run 1.6.1 in Debian GNU/Linux, Ubuntu, Fedora 10, and possibly other operating systems place the magic cookie (MCOOKIE) on the command line, which allows local users to gain…
–
CVE-2008-3832
A certain Fedora patch for the utrace subsystem in the Linux kernel before 2.6.26.5-28 on Fedora 8, and before 2.6.26.5-45 on Fedora 9, allows local users to cause a denial of…