CVE catalog

CVE-2008-5370

pvpgn: CVE-2008-5370

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
0.35% · Oct 25, 2026

pvpgn-support-installer in pvpgn 1.8.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/pvpgn-support-1.0.tar.gz temporary file.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianpvpgnsid1.99.7.2.1+dfsg-5fixed
Debianpvpgnforky1.99.7.2.1+dfsg-5fixed
Debianpvpgntrixie1.99.7.2.1+dfsg-2fixed
Debianpvpgnbookworm1.8.5-3fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianpvpgnsourcesid1.8.1-2lowNot reported[509336]
Debianpvpgnsourceforky1.8.1-2lowNot reported[509336]
Debianpvpgnsourcetrixie1.8.1-2lowNot reported[509336]
Debianpvpgnsourcebookworm1.8.1-2lowNot reported[509336]

[Debian bug #509336]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [pvpgn]Fixed

    Source package: [pvpgn]

    Details (2)

    • 1.8.5-3+b1 · amd64 · bookworm

      Fixed · Fixed: 1.8.1-2

      dsa · pvpgn · debian · bookworm; dsa · pvpgn · debian · 12

    • 1.8.5-3+b1 · arm64 · bookworm

      Fixed · Fixed: 1.8.1-2

      dsa · pvpgn · debian · bookworm; dsa · pvpgn · debian · 12

[Debian 13 (Trixie)]

  • [pvpgn]Fixed
    Details (2)

    • 1.99.7.2.1+dfsg-2 · amd64 · trixie

      Fixed · Fixed: 1.8.1-2

      dsa · pvpgn · debian · 13

    • 1.99.7.2.1+dfsg-2 · arm64 · trixie

      Fixed · Fixed: 1.8.1-2

      dsa · pvpgn · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]