CVE-2008-4406: Debian Xsabre

High severity, CVSS 7.2. EPSS: 0.3% chance of exploitation in the next 30 days.

A certain Debian patch to the run scripts for sabre (aka xsabre) 0.2.4b allows local users to delete or overwrite arbitrary files via a symlink attack on unspecified .tmp files.

Affected products

• Debian Xsabre: version 0.2.4b only

Published 2008-10-03. Last modified 2026-06-16.