CVE-2008-4967: Linuxtrade

Medium severity, CVSS 6.9. EPSS: 0.4% chance of exploitation in the next 30 days.

linuxtrade 3.65 allows local users to overwrite arbitrary files via a symlink attack on the (a) /tmp/bwk, (b) /tmp/zzz, and (c) /tmp/ggg temporary files, related to the (1) linuxtrade.bwkvol, (2) linuxtrade.wn, and (3) moneyam.helper scripts.

Affected products

• Linuxtrade Linuxtrade: version 3.65 only

Published 2008-11-06. Last modified 2026-06-16.