CVE-2008-3278

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-11-07 · updated 2026-06-16
Weakness: CWE-1188

Description

frysk packages through 2008-08-05 as shipped in Red Hat Enterprise Linux 5 are built with an insecure RPATH set in the ELF header of multiple binaries in /usr/bin/f* (e.g. fcore, fcatch, fstack, fstep, ...) shipped in the package. A local attacker can exploit this vulnerability by running arbitrary code as another user.

Affected products

frysk: through 2008-08-05

References

https://access.redhat.com/security/cve/cve-2008-3278
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2008-3278
https://security-tracker.debian.org/tracker/CVE-2008-3278
https://access.redhat.com/security/cve/cve-2008-3278
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2008-3278
https://security-tracker.debian.org/tracker/CVE-2008-3278

Get alerted when CVE-2008-3278 or the next vulnerability affects your stack