[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fIwO2SG7fvX-Vi3ZFZ9AdOLb3HMC6CiQC8xFxNLA1rS4":3,"g5a-risk:CVE-2008-4966":133},{"success":4,"data":5,"meta":131},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":33,"epssPercentile":28,"epssTimeSeries":34,"severity":35,"affectedProducts":36,"affectedProductsCount":42,"references":43,"referencesCount":86,"weaknesses":87,"weaknessesCount":42,"isActivelyExploited":31,"cisaInfo":28,"otxData":28,"relatedBlogPosts":95,"seoMetadata":96,"configurations":121,"relatedVendorCves":129,"notableEvents":130},"CVE-2008-4966","What is CVE-2008-4966?","linux-patch-openswan 2.4.12 allows local users to overwrite arbitrary files via a symlink attack on (a) \u002Ftmp\u002Fsnap##### and (b) \u002Ftmp\u002Fnightly##### temporary files, related to the (1) maysnap and (2) maytest scripts.","linux-patch-openswan 2.4.12 allows local users to overwrite arbitrary files via a symlink attack on (a) \u002Ftmp\u002Fsnap##### and (b) \u002Ftmp\u002Fnightly##### temporary fi...","2008-11-06T15:55:51.793","2026-06-16T22:58:51.253",6.9,"AV:L\u002FAC:M\u002FAu:N\u002FC:C\u002FI:C\u002FA:C",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":17,"CVSSMetricV40":32},[],[],[18],{"Source":19,"Type":20,"CVSSData":21,"BaseSeverity":24,"ExploitabilityScore":29,"ImpactScore":30,"ACInsufInfo":31,"ObtainAllPrivilege":31,"ObtainUserPrivilege":31,"ObtainOtherPrivilege":31,"UserInteractionRequired":31},"nvd@nist.gov","Primary",{"Version":22,"VectorString":13,"AccessVector":23,"AccessComplexity":24,"Authentication":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","LOCAL","MEDIUM","NONE","COMPLETE","",null,3.4,10,false,[],0.00403,[33,33,33,33,33,33,33],"Medium",[37],{"vendor":38,"product":39,"version":40,"criteria":41,"vulnerable":4},"openswan","linux-patch-openswan","2.4.12","cpe:2.3:a:openswan:linux-patch-openswan:2.4.12:*:*:*:*:*:*:*",1,[44,48,53,57,61,65,68,72,74,76,78,80,82,84],{"url":45,"source":46,"tags":47},"http:\u002F\u002Fbugs.debian.org\u002F496376","Debian",[],{"url":49,"source":50,"tags":51},"http:\u002F\u002Fdev.gentoo.org\u002F~rbu\u002Fsecurity\u002Fdebiantemp\u002Flinux-patch-openswan","Gentoo",[52],"Exploit",{"url":54,"source":55,"tags":56},"http:\u002F\u002Fuvw.ru\u002Freport.lenny.txt","Uvw",[],{"url":58,"source":59,"tags":60},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2008\u002F10\u002F30\u002F2","Openwall",[],{"url":62,"source":63,"tags":64},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F30918","Securityfocus",[],{"url":66,"source":50,"tags":67},"https:\u002F\u002Fbugs.gentoo.org\u002Fshow_bug.cgi?id=235770",[],{"url":69,"source":70,"tags":71},"https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F44823","Ibmcloud",[],{"url":45,"source":46,"tags":73},[],{"url":49,"source":50,"tags":75},[52],{"url":54,"source":55,"tags":77},[],{"url":58,"source":59,"tags":79},[],{"url":62,"source":63,"tags":81},[],{"url":66,"source":50,"tags":83},[],{"url":69,"source":70,"tags":85},[],14,[88],{"id":89,"name":90,"description":91,"extendedDescription":27,"status":92,"abstraction":93,"structure":94},"CWE-59","Improper Link Resolution Before File Access ('Link Following')","The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.","Draft","Base","Simple",[],{"title":97,"metaDescription":98,"keywords":99,"canonicalUrl":100,"structuredData":101},"What is CVE-2008-4966? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2008-4966, a medium severity cyber security vulnerability from 2008. linux-patch-openswan 2.4.12 allows local users to overwrit...","CVE-2008-4966, CVE-2008-4966 vulnerability, CVE-2008-4966 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2008, CVSS score, exploit, patch, remediation, openswan security, linux-patch-openswan vulnerability","\u002Fwhat-is\u002Fcve-2008-4966",{"@context":102,"@type":103,"headline":97,"description":98,"datePublished":10,"dateModified":11,"author":104,"publisher":108,"about":112,"mainEntityOfPage":116,"articleSection":119,"keywords":120},"https:\u002F\u002Fschema.org","TechArticle",{"@type":105,"name":106,"url":107},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":105,"name":106,"url":107,"logo":109},{"@type":110,"url":111},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":113,"name":6,"description":114,"additionalType":115},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":117,"@id":118},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2008-4966","Cybersecurity","CVE-2008-4966, CVE-2008-4966 vulnerability, CVE-2008-4966 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[122],{"Operator":28,"Negate":28,"Nodes":123},[124],{"Operator":125,"Negate":31,"CPEMatch":126},"OR",[127],{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":128,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"793A85EF-74D7-48CA-BF03-1DED02F08647",[],[],{"lastModified":11,"cacheTime":132,"version":22},1792378442481,{"score":134,"band":35,"action":135,"scoredAt":136},40,"Plan remediation","2026-10-17T06:36:10.968074+00:00"]