Unscored CVE-2008-5137 EUVD-2008-5116GHSA-g555-pcg3-v642

tkman in tkman 2.2 allows local users to overwrite arbitrary files via a symlink attack on a (1) /tmp/tkman##### or (2) /tmp/ll temporary f…

Published Nov 18, 2008 · Updated Aug 7, 2024 · Assigned by mitre

Description

tkman in tkman 2.2 allows local users to overwrite arbitrary files via a symlink attack on a (1) /tmp/tkman##### or (2) /tmp/ll temporary file.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

openSUSE

Security tracker ↗

Release	Package	Fixed in	Advisory
openSUSE Tumbleweed	tkman	2.2-157.2	openSUSE-SU-2024:10018-1

Advisories 1

openSUSE-SU-2024:10018-1 tkman-2.2-157.2 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026

References

32407 vdb-entry
[debian-devel] 20080811 Re: Possible mass bug filing: The possibility of attack with the help of symlinks in some Debian packages mailing-list