CVE-2008-5144

Source
https://nvd.nist.gov/vuln/detail/CVE-2008-5144
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2008-5144.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2008-5144
Related
Published
2008-11-18T16:00:01Z
Modified
2025-01-14T06:02:19.636181Z
Summary
[none]
Details

nvidia-cg-toolkit-installer in nvidia-cg-toolkit 2.0.0015 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/nvidia-cg-toolkit-manifest temporary file.

References

Affected packages

Debian:11 / nvidia-cg-toolkit

Package

Name
nvidia-cg-toolkit
Purl
pkg:deb/debian/nvidia-cg-toolkit?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.3.0408.0400-3
1.3.0501.0700-1
1.3.0501.0700-2
1.3.0501.0700-3
1.3.0501.0700-3.1
1.3.0501.0700-3.2
1.5.0.0019-1
1.5.0023

2.*

2.0.0010
2.0.0012.deb1
2.0.0012.deb2
2.0.0012.deb3
2.0.0012.deb4
2.0.0012.deb5
2.0.0012.deb6
2.0.0015.deb1
2.0.0015.deb2
2.0.0015.deb3
2.1.0017.deb1
2.1.0017.deb1+nmu1
2.1.0017.deb1+nmu2
2.1.0017.deb1+nmu3

3.*

3.1.0013-1
3.1.0013-2
3.1.0013-3
3.1.0013-4
3.1.0013-5

Ecosystem specific

{
    "urgency": "unimportant"
}

Debian:12 / nvidia-cg-toolkit

Package

Name
nvidia-cg-toolkit
Purl
pkg:deb/debian/nvidia-cg-toolkit?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.3.0408.0400-3
1.3.0501.0700-1
1.3.0501.0700-2
1.3.0501.0700-3
1.3.0501.0700-3.1
1.3.0501.0700-3.2
1.5.0.0019-1
1.5.0023

2.*

2.0.0010
2.0.0012.deb1
2.0.0012.deb2
2.0.0012.deb3
2.0.0012.deb4
2.0.0012.deb5
2.0.0012.deb6
2.0.0015.deb1
2.0.0015.deb2
2.0.0015.deb3
2.1.0017.deb1
2.1.0017.deb1+nmu1
2.1.0017.deb1+nmu2
2.1.0017.deb1+nmu3

3.*

3.1.0013-1
3.1.0013-2
3.1.0013-3
3.1.0013-4
3.1.0013-5

Ecosystem specific

{
    "urgency": "unimportant"
}

Debian:13 / nvidia-cg-toolkit

Package

Name
nvidia-cg-toolkit
Purl
pkg:deb/debian/nvidia-cg-toolkit?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.3.0408.0400-3
1.3.0501.0700-1
1.3.0501.0700-2
1.3.0501.0700-3
1.3.0501.0700-3.1
1.3.0501.0700-3.2
1.5.0.0019-1
1.5.0023

2.*

2.0.0010
2.0.0012.deb1
2.0.0012.deb2
2.0.0012.deb3
2.0.0012.deb4
2.0.0012.deb5
2.0.0012.deb6
2.0.0015.deb1
2.0.0015.deb2
2.0.0015.deb3
2.1.0017.deb1
2.1.0017.deb1+nmu1
2.1.0017.deb1+nmu2
2.1.0017.deb1+nmu3

3.*

3.1.0013-1
3.1.0013-2
3.1.0013-3
3.1.0013-4
3.1.0013-5

Ecosystem specific

{
    "urgency": "unimportant"
}