CVE-2008-1078: Gentoo Linux

High severity, CVSS 7.2. EPSS: 0.5% chance of exploitation in the next 30 days.

expn in the am-utils and net-fs packages for Gentoo, rPath Linux, and other distributions, allows local users to overwrite arbitrary files via a symlink attack on the expn[PID] temporary file. NOTE: this is the same issue as CVE-2003-0308.1.

Affected products

• Gentoo Linux: any version
• Rpath Rpath Linux: any version

Published 2008-02-29. Last modified 2026-06-16.