CVE catalog

CVE-2008-5141

flamethrower: CVE-2008-5141

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
0.31% · Oct 25, 2026

flamethrower in flamethrower 0.1.8 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/multicast.tar.##### temporary file.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianflamethrowersid0.1.8-7fixed
Debianflamethrowerforky0.1.8-7fixed
Debianflamethrowertrixie0.1.8-6.2fixed
Debianflamethrowerbookworm0.1.8-6.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianflamethrowersourcesid0.1.8-2lowNot reported[506350]
Debianflamethrowersourceforky0.1.8-2lowNot reported[506350]
Debianflamethrowersourcetrixie0.1.8-2lowNot reported[506350]
Debianflamethrowersourcebookworm0.1.8-2lowNot reported[506350]

[Debian bug #506350]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [flamethrower]Fixed
    Details (2)

    • 0.1.8-6.1 · all · bookworm

      Fixed · Fixed: 0.1.8-2

      dsa · flamethrower · debian · bookworm; dsa · flamethrower · debian · 12

    • 0.1.8-6.1 · all · bookworm

      Fixed · Fixed: 0.1.8-2

      dsa · flamethrower · debian · bookworm; dsa · flamethrower · debian · 12

[Debian 13 (Trixie)]

  • [flamethrower]Fixed
    Details (2)

    • 0.1.8-6.2 · all · trixie

      Fixed · Fixed: 0.1.8-2

      dsa · flamethrower · debian · 13

    • 0.1.8-6.2 · all · trixie

      Fixed · Fixed: 0.1.8-2

      dsa · flamethrower · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]