CVE-2008-3524: Red Hat Fedora

Medium severity, CVSS 4.7. EPSS: 0.3% chance of exploitation in the next 30 days.

rc.sysinit in initscripts before 8.76.3-1 on Fedora 9 and other Linux platforms allows local users to delete arbitrary files via a symlink attack on a file or directory under (1) /var/lock or (2) /var/run.

Affected products

• Red Hat Fedora: version 9 only
• Red Hat Initscripts: version 8.76.3 only

Published 2008-09-29. Last modified 2026-06-16.