What’s Vulnerable › Vulnerabilities

CVE-2011-5146

• Severity: low (CVSS 2.6 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2012-08-31 · updated 2026-06-16
• Weakness: CWE-59

Description

Bokken before 1.6 and 1.5-x before 1.5-3 for Debian allows local users to overwrite arbitrary files via a symlink attack on /tmp/graph.dot.

Affected products

• Ingumadev Bokken: through 1.5

References

• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=651931
• http://inguma.eu/projects/bokken/repository/revisions/56894084b0ec
• http://ingumadev.blogspot.com/2012/01/bokken-16-is-more-stable-and-easier-to.html
• http://secunia.com/advisories/47252
• http://www.osvdb.org/77700
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=651931
• http://inguma.eu/projects/bokken/repository/revisions/56894084b0ec
• http://ingumadev.blogspot.com/2012/01/bokken-16-is-more-stable-and-easier-to.html
• http://secunia.com/advisories/47252
• http://www.osvdb.org/77700

Get alerted when CVE-2011-5146 or the next vulnerability affects your stack