CVE-2008-2266

MEDIUM · CVSS 4.4 EPSS 0.32%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2008-05-16 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2008-2266

Severity

MEDIUM

CVSS

4.4

EPSS

0.32%

Original Filing — NVD Description

uulib/uunconc.c in UUDeview 0.5.20, as used in nzbget before 0.3.0 and possibly other products, allows local users to overwrite arbitrary files via a symlink attack on a temporary filename generated by the tempnam function. NOTE: this may be a CVE-2004-2265 regression.