# CVEs published 2008-11-05

37 CVEs were published on November 5, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-3527](https://cve.now/CVE-2008-3527.md): arch/i386/kernel/sysenter.c in the Virtual Dynamic Shared Objects (vDSO) implementation in the Linux kernel before 2.6.21 does not properly (no CVSS)
- [CVE-2008-4812](https://cve.now/CVE-2008-4812.md): Array index error in Adobe Reader and Acrobat, and the Explorer extension (aka AcroRd32Info), 8.1.2, 8.1.1, and earlier allows remote attack (no CVSS)
- [CVE-2008-4813](https://cve.now/CVE-2008-4813.md): Adobe Reader and Acrobat 8.1.2 and earlier, and before 7.1.1, allow remote attackers to execute arbitrary code via a crafted PDF document th (no CVSS)
- [CVE-2008-4814](https://cve.now/CVE-2008-4814.md): Unspecified vulnerability in a JavaScript method in Adobe Reader and Acrobat 8.1.2 and earlier, and before 7.1.1, allows remote attackers to (no CVSS)
- [CVE-2008-4815](https://cve.now/CVE-2008-4815.md): Untrusted search path vulnerability in Adobe Reader and Acrobat 8.1.2 and earlier on Unix and Linux allows attackers to gain privileges via (no CVSS)
- [CVE-2008-4816](https://cve.now/CVE-2008-4816.md): Unspecified vulnerability in the Download Manager in Adobe Reader 8.1.2 and earlier on Windows allows remote attackers to change Internet Se (no CVSS)
- [CVE-2008-4817](https://cve.now/CVE-2008-4817.md): The Download Manager in Adobe Acrobat Professional and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary code via a craf (no CVSS)
- [CVE-2008-4931](https://cve.now/CVE-2008-4931.md): Cross-site scripting (XSS) vulnerability in the account module in firmCHANNEL Digital Signage 3.24, and possibly earlier versions, allows re (no CVSS)
- [CVE-2008-4932](https://cve.now/CVE-2008-4932.md): webmail/modules/filesystem/edit.php in U-Mail Webmail server 4.91 allows remote attackers to overwrite arbitrary files via an absolute pathn (no CVSS)
- [CVE-2008-4933](https://cve.now/CVE-2008-4933.md): Buffer overflow in the hfsplus\_find\_cat function in fs/hfsplus/catalog.c in the Linux kernel before 2.6.28-rc1 allows attackers to cause a d (no CVSS)
- [CVE-2008-4934](https://cve.now/CVE-2008-4934.md): The hfsplus\_block\_allocate function in fs/hfsplus/bitmap.c in the Linux kernel before 2.6.28-rc1 does not check a certain return value from (no CVSS)
- [CVE-2008-4935](https://cve.now/CVE-2008-4935.md): asciiview in aview 1.3.0 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/aview#####.pgm temporary file. (no CVSS)
- [CVE-2008-4936](https://cve.now/CVE-2008-4936.md): faxspool in mgetty 1.1.36 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/faxsp.##### temporary file. (no CVSS)
- [CVE-2008-4937](https://cve.now/CVE-2008-4937.md): senddoc in OpenOffice.org (OOo) 2.4.1 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/log.obr.##### temporary (no CVSS)
- [CVE-2008-4938](https://cve.now/CVE-2008-4938.md): aegis 4.24 and aegis-web 4.24 allow local users to overwrite arbitrary files via a symlink attack on (a) /tmp/#####, (b) /tmp/#####.intro, ( (no CVSS)
- [CVE-2008-4939](https://cve.now/CVE-2008-4939.md): apertium 3.0.7 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/#####.lex.cc, (b) /tmp/#####.deformat.l, (c) (no CVSS)
- [CVE-2008-4940](https://cve.now/CVE-2008-4940.md): xmlfile.py in aptoncd 0.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/aptoncd temporary file. (no CVSS)
- [CVE-2008-4941](https://cve.now/CVE-2008-4941.md): arb-common 0.0.20071207.1 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/arb\_fdnaml\_\*, (b) /tmp/arb\_pids\_\* (no CVSS)
- [CVE-2008-4942](https://cve.now/CVE-2008-4942.md): audiolink in audiolink 0.05 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/audiolink.db.tmp and (2) /t (no CVSS)
- [CVE-2008-4943](https://cve.now/CVE-2008-4943.md): bulmages-servers 0.11.1 allows local users to overwrite arbitrary files via a symlink attack on the (a) /tmp/error.txt, (b) /tmp/errores.txt (no CVSS)
- [CVE-2008-4944](https://cve.now/CVE-2008-4944.md): writtercontrol in cdcontrol 1.90 allows local users to overwrite arbitrary files via a symlink attack on /tmp/v-recorder\*-out temporary file (no CVSS)
- [CVE-2008-4945](https://cve.now/CVE-2008-4945.md): amlabel-cdrw in cdrw-taper 0.4 might allow local users to overwrite arbitrary files via a symlink attack involving a /tmp/amlabel-cdrw.##### (no CVSS)
- [CVE-2008-4946](https://cve.now/CVE-2008-4946.md): convirt 0.8.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/set\_output temporary file, related to the (1) (no CVSS)
- [CVE-2008-4947](https://cve.now/CVE-2008-4947.md): dhis-dummy-log-engine in dhis-server 5.3 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/dhis-dummy-log-eng (no CVSS)
- [CVE-2008-4948](https://cve.now/CVE-2008-4948.md): fest.pl in digitaldj 0.7.5 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/ddj\_fest.tmp temporary file. (no CVSS)
- [CVE-2008-4949](https://cve.now/CVE-2008-4949.md): dist 3.5 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/cil#####, (b) /tmp/pdo#####, and (c) /tmp/pdn##### (no CVSS)
- [CVE-2008-4950](https://cve.now/CVE-2008-4950.md): gccross in dpkg-cross 2.3.0 allows local users to overwrite arbitrary files via a symlink attack on the tmp/gccross2.log temporary file. (no CVSS)
- [CVE-2008-4951](https://cve.now/CVE-2008-4951.md): dtc 0.29.6 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/awstats.log, (b) /tmp/spam.log.#####, and (c) /t (no CVSS)
- [CVE-2008-4952](https://cve.now/CVE-2008-4952.md): emacs-jabber in emacs-jabber 0.7.91 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/\*.log temporary file. (no CVSS)
- [CVE-2008-4953](https://cve.now/CVE-2008-4953.md): firehol in firehol 1.256 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/.firehol-tmp-#####-\*-\* and (2) /tm (no CVSS)
- [CVE-2008-4954](https://cve.now/CVE-2008-4954.md): mead.pl in fml 4.0.3 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/debugbuf temporary file. (no CVSS)
- [CVE-2008-4955](https://cve.now/CVE-2008-4955.md): freevo.real in freevo 1.8.1 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/\*-#####.pid, (2) /tmp/freevo-gd (no CVSS)
- [CVE-2008-4956](https://cve.now/CVE-2008-4956.md): fwb\_install in fwbuilder 2.1.19 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/ssh-agent.##### temporary fil (no CVSS)
- [CVE-2008-4957](https://cve.now/CVE-2008-4957.md): find\_flags in Kitware GCC-XML (gccxml) 0.9.0 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/\*.cxx temporary (no CVSS)
- [CVE-2008-4958](https://cve.now/CVE-2008-4958.md): gdrae in gdrae 0.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/gdrae/palabra temporary file. (no CVSS)
- [CVE-2008-4959](https://cve.now/CVE-2008-4959.md): geo-code in gpsdrive-scripts 2.10~pre4 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/geo.google, (2) /tmp (no CVSS)
- [CVE-2008-4960](https://cve.now/CVE-2008-4960.md): impose in impose+ 0.2 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/\*-tmp.ps and (2) /tmp/bboxx-\* tempora (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-11-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.