[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f1VGYrrFDGx4gnUub8inLJwwWdA3iBqtExa1RyEUPiwc":3,"g5a-risk:CVE-2008-5394":161},{"success":4,"data":5,"meta":159},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":34,"epssPercentile":28,"epssTimeSeries":35,"severity":36,"affectedProducts":37,"affectedProductsCount":43,"references":44,"referencesCount":114,"weaknesses":115,"weaknessesCount":43,"isActivelyExploited":32,"cisaInfo":28,"otxData":28,"relatedBlogPosts":123,"seoMetadata":124,"configurations":149,"relatedVendorCves":157,"notableEvents":158},"CVE-2008-5394","What is CVE-2008-5394?","\u002Fbin\u002Flogin in shadow 4.0.18.1 in Debian GNU\u002FLinux, and probably other Linux distributions, allows local users in the utmp group to overwrite arbitrary files via a symlink attack on a temporary file referenced in a line (aka ut_line) field in a utmp entry.","\u002Fbin\u002Flogin in shadow 4.0.18.1 in Debian GNU\u002FLinux, and probably other Linux distributions, allows local users in the utmp group to overwrite arbitrary files ...","2008-12-09T00:30:00.517","2026-06-16T22:59:53.377",7.2,"AV:L\u002FAC:L\u002FAu:N\u002FC:C\u002FI:C\u002FA:C",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":17,"CVSSMetricV40":33},[],[],[18],{"Source":19,"Type":20,"CVSSData":21,"BaseSeverity":29,"ExploitabilityScore":30,"ImpactScore":31,"ACInsufInfo":32,"ObtainAllPrivilege":4,"ObtainUserPrivilege":32,"ObtainOtherPrivilege":32,"UserInteractionRequired":32},"nvd@nist.gov","Primary",{"Version":22,"VectorString":13,"AccessVector":23,"AccessComplexity":24,"Authentication":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","LOCAL","LOW","NONE","COMPLETE","",null,"HIGH",3.9,10,false,[],0.00949,[34,34,34,34,34,34,34],"High",[38],{"vendor":39,"product":40,"version":41,"criteria":42,"vulnerable":4},"debian","shadow","4.0.18.1","cpe:2.3:a:debian:shadow:4.0.18.1:*:*:*:*:*:*:*",1,[45,49,52,55,59,63,67,71,75,78,82,86,90,92,94,96,98,100,102,104,106,108,110,112],{"url":46,"source":47,"tags":48},"http:\u002F\u002Fbugs.debian.org\u002F332198","Debian",[],{"url":50,"source":47,"tags":51},"http:\u002F\u002Fbugs.debian.org\u002F505071",[],{"url":53,"source":47,"tags":54},"http:\u002F\u002Fbugs.debian.org\u002F505271",[],{"url":56,"source":57,"tags":58},"http:\u002F\u002Fosvdb.org\u002F52200","Osvdb",[],{"url":60,"source":61,"tags":62},"http:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002Fglsa-200903-24.xml","Gentoo",[],{"url":64,"source":65,"tags":66},"http:\u002F\u002Fsecurityreason.com\u002Fsecurityalert\u002F4695","Securityreason",[],{"url":68,"source":69,"tags":70},"http:\u002F\u002Fwww.mandriva.com\u002Fsecurity\u002Fadvisories?name=MDVSA-2009:062","Mandriva",[],{"url":72,"source":73,"tags":74},"http:\u002F\u002Fwww.securityfocus.com\u002Farchive\u002F1\u002F498769\u002F100\u002F0\u002Fthreaded","Securityfocus",[],{"url":76,"source":73,"tags":77},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F32552",[],{"url":79,"source":80,"tags":81},"http:\u002F\u002Fwww.ubuntu.com\u002Fusn\u002Fusn-695-1","Ubuntu",[],{"url":83,"source":84,"tags":85},"https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F47037","Ibmcloud",[],{"url":87,"source":88,"tags":89},"https:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F7313","Exploit-db",[],{"url":46,"source":47,"tags":91},[],{"url":50,"source":47,"tags":93},[],{"url":53,"source":47,"tags":95},[],{"url":56,"source":57,"tags":97},[],{"url":60,"source":61,"tags":99},[],{"url":64,"source":65,"tags":101},[],{"url":68,"source":69,"tags":103},[],{"url":72,"source":73,"tags":105},[],{"url":76,"source":73,"tags":107},[],{"url":79,"source":80,"tags":109},[],{"url":83,"source":84,"tags":111},[],{"url":87,"source":88,"tags":113},[],24,[116],{"id":117,"name":118,"description":119,"extendedDescription":27,"status":120,"abstraction":121,"structure":122},"CWE-59","Improper Link Resolution Before File Access ('Link Following')","The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.","Draft","Base","Simple",[],{"title":125,"metaDescription":126,"keywords":127,"canonicalUrl":128,"structuredData":129},"What is CVE-2008-5394? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2008-5394, a high severity cyber security vulnerability from 2008. \u002Fbin\u002Flogin in shadow 4.0.18.1 in Debian GNU\u002FLinux, and proba...","CVE-2008-5394, CVE-2008-5394 vulnerability, CVE-2008-5394 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2008, CVSS score, exploit, patch, remediation, debian security, shadow vulnerability","\u002Fwhat-is\u002Fcve-2008-5394",{"@context":130,"@type":131,"headline":125,"description":126,"datePublished":10,"dateModified":11,"author":132,"publisher":136,"about":140,"mainEntityOfPage":144,"articleSection":147,"keywords":148},"https:\u002F\u002Fschema.org","TechArticle",{"@type":133,"name":134,"url":135},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":133,"name":134,"url":135,"logo":137},{"@type":138,"url":139},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":141,"name":6,"description":142,"additionalType":143},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":145,"@id":146},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2008-5394","Cybersecurity","CVE-2008-5394, CVE-2008-5394 vulnerability, CVE-2008-5394 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[150],{"Operator":28,"Negate":28,"Nodes":151},[152],{"Operator":153,"Negate":32,"CPEMatch":154},"OR",[155],{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":156,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"6BC9AF32-DEC5-4801-B975-23E9B65EBA4F",[],[],{"lastModified":11,"cacheTime":160,"version":22},1793223990407,{"score":162,"band":163,"action":164,"scoredAt":165},45,"Medium","Plan remediation","2026-10-28T06:35:29.350904+00:00"]