# CVEs published 2008-11-07 9 CVEs were published on November 7, 2008: 0 critical, 0 high. Days are UTC. - [CVE-2008-4993](https://cve.now/CVE-2008-4993.md): qemu-dm.debug in Xen 3.2.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/args temporary file. (no CVSS) - [CVE-2008-4994](https://cve.now/CVE-2008-4994.md): The (1) ncsarmt and (2) ncsawrap scripts in xmcd 2.6 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/Mosaic.\* (no CVSS) - [CVE-2008-4995](https://cve.now/CVE-2008-4995.md): redirect.pl in bk2site 1.1.9 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/redirect.log temporary file. (no CVSS) - [CVE-2008-4996](https://cve.now/CVE-2008-4996.md): init in initramfs-tools 0.92f allows local users to overwrite arbitrary files via a symlink attack on the /tmp/initramfs.debug temporary fil (CVSS 5.5) - [CVE-2008-4997](https://cve.now/CVE-2008-4997.md): dfxml-invoice in datafreedom-perl 0.1.7 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/zenity temporary fi (no CVSS) - [CVE-2008-4998](https://cve.now/CVE-2008-4998.md): postinst in twiki 4.1.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/twiki temporary file. (no CVSS) - [CVE-2008-4999](https://cve.now/CVE-2008-4999.md): Nortel Networks UNIStim IP Phone 0604DAS allows remote attackers to cause a denial of service (crash) via a long ping packet ("ping of death (no CVSS) - [CVE-2008-4414](https://cve.now/CVE-2008-4414.md): Unspecified vulnerability in the AdvFS showfile command in HP Tru64 UNIX 5.1B-3 and 5.1B-4 allows local users to gain privileges via unspeci (no CVSS) - [CVE-2008-4992](https://cve.now/CVE-2008-4992.md): The SPARC hypervisor in Sun System Firmware 6.6.3 through 6.6.5 and 7.1.3 through 7.1.3.e on UltraSPARC T1, T2, and T2+ processors allows lo (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2008-11-07 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.