CVE catalog

CVE-2008-0666

wml: CVE-2008-0666

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
0.43% · Oct 25, 2026

Website META Language (WML) 2.0.11 allows local users to overwrite arbitrary files via a symlink attack on (1) the /tmp/pe.tmp.$$ temporary file used by wml_contrib/wmg.cgi and (2) temporary files used by wml_backend/p3_eperl/eperl_sys.c.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianwmlsid2.32.0~ds1-1.1fixed
Debianwmlforky2.32.0~ds1-1.1fixed
Debianwmltrixie2.32.0~ds1-1fixed
Debianwmlbookworm2.32.0~ds1-1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianwmlsourcesid2.0.11-3.1lowNot reported[463907]
Debianwmlsourceforky2.0.11-3.1lowNot reported[463907]
Debianwmlsourcetrixie2.0.11-3.1lowNot reported[463907]
Debianwmlsourcebookworm2.0.11-3.1lowNot reported[463907]

[Debian bug #463907]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [slice]Fixed

    Source package: [wml]

    Details (2)

    • 2.32.0~ds1-1 · all · bookworm

      Fixed · Fixed: 2.0.11-3.1

      dsa · wml · debian · bookworm; dsa · wml · debian · 12

    • 2.32.0~ds1-1 · all · bookworm

      Fixed · Fixed: 2.0.11-3.1

      dsa · wml · debian · bookworm; dsa · wml · debian · 12

  • [wml]Fixed
    Details (2)

    • 2.32.0~ds1-1 · all · bookworm

      Fixed · Fixed: 2.0.11-3.1

      dsa · wml · debian · bookworm; dsa · wml · debian · 12

    • 2.32.0~ds1-1 · all · bookworm

      Fixed · Fixed: 2.0.11-3.1

      dsa · wml · debian · bookworm; dsa · wml · debian · 12

[Debian 13 (Trixie)]

  • [slice]Fixed

    Source package: [wml]

    Details (2)

    • 2.32.0~ds1-1 · all · trixie

      Fixed · Fixed: 2.0.11-3.1

      dsa · wml · debian · 13

    • 2.32.0~ds1-1 · all · trixie

      Fixed · Fixed: 2.0.11-3.1

      dsa · wml · debian · 13

  • [wml]Fixed
    Details (2)

    • 2.32.0~ds1-1 · all · trixie

      Fixed · Fixed: 2.0.11-3.1

      dsa · wml · debian · 13

    • 2.32.0~ds1-1 · all · trixie

      Fixed · Fixed: 2.0.11-3.1

      dsa · wml · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]