[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f2dAsGOhBZ6oNBNtPmVN1SfzpBEdIN2XwqtQbxSbqIDs":3,"g5a-risk:CVE-2008-4406":127},{"success":4,"data":5,"meta":125},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":34,"epssPercentile":28,"epssTimeSeries":35,"severity":36,"affectedProducts":37,"affectedProductsCount":43,"references":44,"referencesCount":80,"weaknesses":81,"weaknessesCount":43,"isActivelyExploited":32,"cisaInfo":28,"otxData":28,"relatedBlogPosts":89,"seoMetadata":90,"configurations":115,"relatedVendorCves":123,"notableEvents":124},"CVE-2008-4406","What is CVE-2008-4406?","A certain Debian patch to the run scripts for sabre (aka xsabre) 0.2.4b allows local users to delete or overwrite arbitrary files via a symlink attack on unspecified .tmp files.","A certain Debian patch to the run scripts for sabre (aka xsabre) 0.2.4b allows local users to delete or overwrite arbitrary files via a symlink attack on uns...","2008-10-03T17:41:40.51","2026-06-16T22:57:45.36",7.2,"AV:L\u002FAC:L\u002FAu:N\u002FC:C\u002FI:C\u002FA:C",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":17,"CVSSMetricV40":33},[],[],[18],{"Source":19,"Type":20,"CVSSData":21,"BaseSeverity":29,"ExploitabilityScore":30,"ImpactScore":31,"ACInsufInfo":32,"ObtainAllPrivilege":4,"ObtainUserPrivilege":32,"ObtainOtherPrivilege":32,"UserInteractionRequired":32},"nvd@nist.gov","Primary",{"Version":22,"VectorString":13,"AccessVector":23,"AccessComplexity":24,"Authentication":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","LOCAL","LOW","NONE","COMPLETE","",null,"HIGH",3.9,10,false,[],0.00345,[34,34,34,34,34,34,34],"High",[38],{"vendor":39,"product":40,"version":41,"criteria":42,"vulnerable":4},"debian","xsabre","0.2.4b","cpe:2.3:a:debian:xsabre:0.2.4b:*:*:*:*:*:*:*",1,[45,49,53,57,61,65,68,70,72,74,76,78],{"url":46,"source":47,"tags":48},"http:\u002F\u002Fbugs.debian.org\u002F433996","Debian",[],{"url":50,"source":51,"tags":52},"http:\u002F\u002Fopenwall.com\u002Flists\u002Foss-security\u002F2008\u002F10\u002F01\u002F1","Openwall",[],{"url":54,"source":55,"tags":56},"http:\u002F\u002Fosvdb.org\u002F48895","Osvdb",[],{"url":58,"source":59,"tags":60},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F31512","Securityfocus",[],{"url":62,"source":63,"tags":64},"https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F45609","Ibmcloud",[],{"url":66,"source":63,"tags":67},"https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F45715",[],{"url":46,"source":47,"tags":69},[],{"url":50,"source":51,"tags":71},[],{"url":54,"source":55,"tags":73},[],{"url":58,"source":59,"tags":75},[],{"url":62,"source":63,"tags":77},[],{"url":66,"source":63,"tags":79},[],12,[82],{"id":83,"name":84,"description":85,"extendedDescription":27,"status":86,"abstraction":87,"structure":88},"CWE-59","Improper Link Resolution Before File Access ('Link Following')","The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.","Draft","Base","Simple",[],{"title":91,"metaDescription":92,"keywords":93,"canonicalUrl":94,"structuredData":95},"What is CVE-2008-4406? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2008-4406, a high severity cyber security vulnerability from 2008. A certain Debian patch to the run scripts for sabre (aka xsa...","CVE-2008-4406, CVE-2008-4406 vulnerability, CVE-2008-4406 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2008, CVSS score, exploit, patch, remediation, debian security, xsabre vulnerability","\u002Fwhat-is\u002Fcve-2008-4406",{"@context":96,"@type":97,"headline":91,"description":92,"datePublished":10,"dateModified":11,"author":98,"publisher":102,"about":106,"mainEntityOfPage":110,"articleSection":113,"keywords":114},"https:\u002F\u002Fschema.org","TechArticle",{"@type":99,"name":100,"url":101},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":99,"name":100,"url":101,"logo":103},{"@type":104,"url":105},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":107,"name":6,"description":108,"additionalType":109},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":111,"@id":112},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2008-4406","Cybersecurity","CVE-2008-4406, CVE-2008-4406 vulnerability, CVE-2008-4406 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[116],{"Operator":28,"Negate":28,"Nodes":117},[118],{"Operator":119,"Negate":32,"CPEMatch":120},"OR",[121],{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":122,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"8536A767-27B9-4060-B2CE-5593A2351954",[],[],{"lastModified":11,"cacheTime":126,"version":22},1793214865115,{"score":128,"band":129,"action":130,"scoredAt":131},45,"Medium","Plan remediation","2026-10-28T06:35:18.996095+00:00"]