CVE-2008-5380

Severity: medium (CVSS 6.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-12-08 · updated 2026-06-16
Weakness: CWE-59

Description

gpsdrive (aka gpsdrive-scripts) 2.09 allows local users to overwrite arbitrary files via a symlink attack on an (a) /tmp/geo#####, a (b) /tmp/geocaching.loc, a (c) /tmp/geo#####.*, or a (d) /tmp/geo.* temporary file, related to the (1) geo-code and (2) geo-nearest scripts, different vectors than CVE-2008-4959.

Affected products

Gpsdrive: 2.09

References

http://lists.debian.org/debian-devel/2008/08/msg00285.html
http://secunia.com/advisories/31694
http://secunia.com/advisories/33825
https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00187.html
http://lists.debian.org/debian-devel/2008/08/msg00285.html
http://secunia.com/advisories/31694
http://secunia.com/advisories/33825
https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00187.html

Get alerted when CVE-2008-5380 or the next vulnerability affects your stack