[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ffhiiPqh3N0isW4DsIqkgFqxOuIZCrrbb5Go80v427ao":3,"g5a-risk:CVE-2008-4984":133},{"success":4,"data":5,"meta":131},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":33,"epssPercentile":28,"epssTimeSeries":34,"severity":35,"affectedProducts":36,"affectedProductsCount":42,"references":43,"referencesCount":86,"weaknesses":87,"weaknessesCount":42,"isActivelyExploited":31,"cisaInfo":28,"otxData":28,"relatedBlogPosts":95,"seoMetadata":96,"configurations":121,"relatedVendorCves":129,"notableEvents":130},"CVE-2008-4984","What is CVE-2008-4984?","scratchbox2 1.99.0.24 allows local users to overwrite arbitrary files via a symlink attack on (a) \u002Ftmp\u002Fdpkg.#####.tmp, (b) \u002Ftmp\u002Fmissing_deps.#####, and (c) \u002Ftmp\u002Fsb2-pkg-chk.$tstamp.##### temporary files, related to the (1) dpkg-checkbuilddeps and (2) sb2-check-pkg-mappings scripts.","scratchbox2 1.99.0.24 allows local users to overwrite arbitrary files via a symlink attack on (a) \u002Ftmp\u002Fdpkg.#####.tmp, (b) \u002Ftmp\u002Fmissing_deps.#####, and (c) \u002F...","2008-11-06T15:55:52.293","2026-06-16T22:58:53.313",6.9,"AV:L\u002FAC:M\u002FAu:N\u002FC:C\u002FI:C\u002FA:C",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":17,"CVSSMetricV40":32},[],[],[18],{"Source":19,"Type":20,"CVSSData":21,"BaseSeverity":24,"ExploitabilityScore":29,"ImpactScore":30,"ACInsufInfo":31,"ObtainAllPrivilege":31,"ObtainUserPrivilege":31,"ObtainOtherPrivilege":31,"UserInteractionRequired":31},"nvd@nist.gov","Primary",{"Version":22,"VectorString":13,"AccessVector":23,"AccessComplexity":24,"Authentication":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","LOCAL","MEDIUM","NONE","COMPLETE","",null,3.4,10,false,[],0.00318,[33,33,33,33,33,33,33],"Medium",[37],{"vendor":38,"product":39,"version":40,"criteria":41,"vulnerable":4},"freedesktop","scratchbox2","1.99.0.24","cpe:2.3:a:freedesktop:scratchbox2:1.99.0.24:*:*:*:*:*:*:*",1,[44,48,53,57,61,65,68,72,74,76,78,80,82,84],{"url":45,"source":46,"tags":47},"http:\u002F\u002Fbugs.debian.org\u002F496409","Debian",[],{"url":49,"source":50,"tags":51},"http:\u002F\u002Fdev.gentoo.org\u002F~rbu\u002Fsecurity\u002Fdebiantemp\u002Fscratchbox2","Gentoo",[52],"Vendor Advisory",{"url":54,"source":55,"tags":56},"http:\u002F\u002Fuvw.ru\u002Freport.lenny.txt","Uvw",[],{"url":58,"source":59,"tags":60},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2008\u002F10\u002F30\u002F2","Openwall",[],{"url":62,"source":63,"tags":64},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F30969","Securityfocus",[],{"url":66,"source":50,"tags":67},"https:\u002F\u002Fbugs.gentoo.org\u002Fshow_bug.cgi?id=235770",[],{"url":69,"source":70,"tags":71},"https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F44907","Ibmcloud",[],{"url":45,"source":46,"tags":73},[],{"url":49,"source":50,"tags":75},[52],{"url":54,"source":55,"tags":77},[],{"url":58,"source":59,"tags":79},[],{"url":62,"source":63,"tags":81},[],{"url":66,"source":50,"tags":83},[],{"url":69,"source":70,"tags":85},[],14,[88],{"id":89,"name":90,"description":91,"extendedDescription":27,"status":92,"abstraction":93,"structure":94},"CWE-59","Improper Link Resolution Before File Access ('Link Following')","The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.","Draft","Base","Simple",[],{"title":97,"metaDescription":98,"keywords":99,"canonicalUrl":100,"structuredData":101},"What is CVE-2008-4984? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2008-4984, a medium severity cyber security vulnerability from 2008. scratchbox2 1.99.0.24 allows local users to overwrite arbi...","CVE-2008-4984, CVE-2008-4984 vulnerability, CVE-2008-4984 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2008, CVSS score, exploit, patch, remediation, freedesktop security, scratchbox2 vulnerability","\u002Fwhat-is\u002Fcve-2008-4984",{"@context":102,"@type":103,"headline":97,"description":98,"datePublished":10,"dateModified":11,"author":104,"publisher":108,"about":112,"mainEntityOfPage":116,"articleSection":119,"keywords":120},"https:\u002F\u002Fschema.org","TechArticle",{"@type":105,"name":106,"url":107},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":105,"name":106,"url":107,"logo":109},{"@type":110,"url":111},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":113,"name":6,"description":114,"additionalType":115},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":117,"@id":118},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2008-4984","Cybersecurity","CVE-2008-4984, CVE-2008-4984 vulnerability, CVE-2008-4984 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[122],{"Operator":28,"Negate":28,"Nodes":123},[124],{"Operator":125,"Negate":31,"CPEMatch":126},"OR",[127],{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":128,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"793692C4-E69F-43E6-B87E-454788527718",[],[],{"lastModified":11,"cacheTime":132,"version":22},1792362769697,{"score":134,"band":135,"action":136,"scoredAt":137},18,"Info","Track","2026-10-17T06:36:10.972006+00:00"]