{"id":"CVE-2008-5135","details":"os-prober in os-prober 1.17 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/mounted-map or (2) /tmp/raided-map temporary file.  NOTE: the vendor disputes this issue, stating \"the insecure code path should only ever run inside a d-i environment, which has no non-root users.","modified":"2026-04-10T03:40:20.333604Z","published":"2008-11-18T16:00:01Z","database_specific":{"isDisputed":true},"references":[{"type":"WEB","url":"http://lists.debian.org/debian-devel/2008/08/msg00285.html"},{"type":"WEB","url":"http://lists.debian.org/debian-devel/2008/08/msg00296.html"}],"schema_version":"1.7.5"}