{"id":"UBUNTU-CVE-2008-5144","details":"nvidia-cg-toolkit-installer in nvidia-cg-toolkit 2.0.0015 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/nvidia-cg-toolkit-manifest temporary file.","modified":"2026-05-20T16:03:03.987367696Z","published":"2008-11-18T16:00:00Z","upstream":["CVE-2008-5144"],"references":[{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2008-5144"},{"type":"REPORT","url":"https://www.cve.org/CVERecord?id=CVE-2008-5144"}],"affected":[{"package":{"name":"nvidia-cg-toolkit","ecosystem":"Ubuntu:16.04:LTS","purl":"pkg:deb/ubuntu/nvidia-cg-toolkit?arch=source&distro=xenial"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.0013-2"],"ecosystem_specific":{"binaries":[{"binary_name":"libcg","binary_version":"3.1.0013-2"},{"binary_version":"3.1.0013-2","binary_name":"libcggl"},{"binary_version":"3.1.0013-2","binary_name":"nvidia-cg-toolkit"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2008/UBUNTU-CVE-2008-5144.json"}},{"package":{"name":"nvidia-cg-toolkit","ecosystem":"Ubuntu:18.04:LTS","purl":"pkg:deb/ubuntu/nvidia-cg-toolkit?arch=source&distro=bionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.0013-2","3.1.0013-3"],"ecosystem_specific":{"binaries":[{"binary_version":"3.1.0013-3","binary_name":"libcg"},{"binary_name":"libcggl","binary_version":"3.1.0013-3"},{"binary_name":"nvidia-cg-toolkit","binary_version":"3.1.0013-3"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2008/UBUNTU-CVE-2008-5144.json"}},{"package":{"name":"nvidia-cg-toolkit","ecosystem":"Ubuntu:20.04:LTS","purl":"pkg:deb/ubuntu/nvidia-cg-toolkit?arch=source&distro=focal"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.0013-5"],"ecosystem_specific":{"binaries":[{"binary_name":"libcg","binary_version":"3.1.0013-5"},{"binary_version":"3.1.0013-5","binary_name":"libcggl"},{"binary_name":"nvidia-cg-toolkit","binary_version":"3.1.0013-5"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2008/UBUNTU-CVE-2008-5144.json"}},{"package":{"name":"nvidia-cg-toolkit","ecosystem":"Ubuntu:22.04:LTS","purl":"pkg:deb/ubuntu/nvidia-cg-toolkit?arch=source&distro=jammy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.0013-5"],"ecosystem_specific":{"binaries":[{"binary_name":"libcg","binary_version":"3.1.0013-5"},{"binary_name":"libcggl","binary_version":"3.1.0013-5"},{"binary_name":"nvidia-cg-toolkit","binary_version":"3.1.0013-5"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2008/UBUNTU-CVE-2008-5144.json"}},{"package":{"name":"nvidia-cg-toolkit","ecosystem":"Ubuntu:24.04:LTS","purl":"pkg:deb/ubuntu/nvidia-cg-toolkit?arch=source&distro=noble"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.0013-5build1"],"ecosystem_specific":{"binaries":[{"binary_version":"3.1.0013-5build1","binary_name":"libcg"},{"binary_name":"libcggl","binary_version":"3.1.0013-5build1"},{"binary_version":"3.1.0013-5build1","binary_name":"nvidia-cg-toolkit"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2008/UBUNTU-CVE-2008-5144.json"}},{"package":{"name":"nvidia-cg-toolkit","ecosystem":"Ubuntu:25.10","purl":"pkg:deb/ubuntu/nvidia-cg-toolkit?arch=source&distro=questing"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.0013-5build1"],"ecosystem_specific":{"binaries":[{"binary_name":"libcg","binary_version":"3.1.0013-5build1"},{"binary_name":"libcggl","binary_version":"3.1.0013-5build1"},{"binary_version":"3.1.0013-5build1","binary_name":"nvidia-cg-toolkit"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2008/UBUNTU-CVE-2008-5144.json"}},{"package":{"name":"nvidia-cg-toolkit","ecosystem":"Ubuntu:26.04:LTS","purl":"pkg:deb/ubuntu/nvidia-cg-toolkit?arch=source&distro=resolute"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.0013-5build1","3.1.0013-5build2"],"ecosystem_specific":{"binaries":[{"binary_name":"libcg","binary_version":"3.1.0013-5build2"},{"binary_version":"3.1.0013-5build2","binary_name":"libcggl"},{"binary_name":"nvidia-cg-toolkit","binary_version":"3.1.0013-5build2"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2008/UBUNTU-CVE-2008-5144.json"}}],"schema_version":"1.7.5","severity":[{"type":"Ubuntu","score":"negligible"}]}