What’s Vulnerable › Vulnerabilities

CVE-2008-5153

• Severity: medium (CVSS 6.9 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2008-11-18 · updated 2026-06-16
• Weakness: CWE-59

Description

spell-check-logic.cgi in Moodle 1.8.2 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/spell-check-debug.log, (2) /tmp/spell-check-before, or (3) /tmp/spell-check-after temporary file.

Affected products

• Moodle: 1.8.2

References

• http://lists.debian.org/debian-devel/2008/08/msg00347.html
• http://secunia.com/advisories/33955
• http://uvw.ru/report.sid.txt
• http://www.debian.org/security/2009/dsa-1724
• http://www.securityfocus.com/bid/32402
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46708
• http://lists.debian.org/debian-devel/2008/08/msg00347.html
• http://secunia.com/advisories/33955
• http://uvw.ru/report.sid.txt
• http://www.debian.org/security/2009/dsa-1724
• http://www.securityfocus.com/bid/32402
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46708

Get alerted when CVE-2008-5153 or the next vulnerability affects your stack