# CVEs published 2008-12-08

20 CVEs were published on December 8, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-5366](https://cve.now/CVE-2008-5366.md): The postinst script in ppp 2.4.4rel on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp (no CVSS)
- [CVE-2008-5367](https://cve.now/CVE-2008-5367.md): ip-up in ppp-udeb 2.4.4rel on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on the /tmp/resolv.conf. (no CVSS)
- [CVE-2008-5368](https://cve.now/CVE-2008-5368.md): muttprint in muttprint 0.72d allows local users to overwrite arbitrary files via a symlink attack on the /tmp/muttprint.log temporary file. (no CVSS)
- [CVE-2008-5369](https://cve.now/CVE-2008-5369.md): noip2 in noip2 2.1.7 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/noip2 temporary file. (no CVSS)
- [CVE-2008-5370](https://cve.now/CVE-2008-5370.md): pvpgn-support-installer in pvpgn 1.8.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/pvpgn-support-1.0.ta (no CVSS)
- [CVE-2008-5371](https://cve.now/CVE-2008-5371.md): screenie in screenie 1.30.0 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.screenie.##### temporary file. (no CVSS)
- [CVE-2008-5372](https://cve.now/CVE-2008-5372.md): sdm-login in sdm-terminal 0.4.0b allows local users to overwrite arbitrary files via a symlink attack on the /tmp/sdm.autologin.once tempora (no CVSS)
- [CVE-2008-5373](https://cve.now/CVE-2008-5373.md): mtx-changer.Adic-Scalar-24 in bacula-common 2.4.2 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/mtx.##### t (no CVSS)
- [CVE-2008-5374](https://cve.now/CVE-2008-5374.md): bash-doc 3.2 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/cb#####.? temporary file, related to the (1) ali (no CVSS)
- [CVE-2008-5375](https://cve.now/CVE-2008-5375.md): cmus-status-display in cmus 2.2.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/cmus-status temporary fil (no CVSS)
- [CVE-2008-5376](https://cve.now/CVE-2008-5376.md): editcomment in crip 3.7 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/\*.tag.tmp temporary file. (no CVSS)
- [CVE-2008-5377](https://cve.now/CVE-2008-5377.md): pstopdf in CUPS 1.3.8 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/pstopdf.log temporary file, a differe (no CVSS)
- [CVE-2008-5378](https://cve.now/CVE-2008-5378.md): arb-kill in arb 0.0.20071207.1 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/arb\_pids\_\*\_\* temporary file. (no CVSS)
- [CVE-2008-5379](https://cve.now/CVE-2008-5379.md): netdisco-mibs-installer 1.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/netdisco-mibs-0.6.tar.gz tempor (no CVSS)
- [CVE-2008-5380](https://cve.now/CVE-2008-5380.md): gpsdrive (aka gpsdrive-scripts) 2.09 allows local users to overwrite arbitrary files via a symlink attack on an (a) /tmp/geo#####, a (b) /tm (no CVSS)
- [CVE-2008-5361](https://cve.now/CVE-2008-5361.md): The ActionScript 2 virtual machine in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0, and Adobe AIR before 1.5, does not (no CVSS)
- [CVE-2008-5362](https://cve.now/CVE-2008-5362.md): The DefineConstantPool action in the ActionScript 2 virtual machine in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0, a (no CVSS)
- [CVE-2008-5363](https://cve.now/CVE-2008-5363.md): The ActionScript 2 virtual machine in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0, and Adobe AIR before 1.5, does not (no CVSS)
- [CVE-2008-5364](https://cve.now/CVE-2008-5364.md): Stack-based buffer overflow in the getPlus ActiveX control in gp.ocx 1.2.2.50 in NOS Microsystems getPlus Download Manager, as used for the (no CVSS)
- [CVE-2008-5365](https://cve.now/CVE-2008-5365.md): SQL injection vulnerability in VoteHistory.asp in ActiveWebSoftwares ActiveVotes 2.2 allows remote attackers to execute arbitrary SQL comman (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-12-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.