CVE-2008-4970: Lustre Lustre-Tests

Medium severity, CVSS 6.9. EPSS: 0.4% chance of exploitation in the next 30 days.

runiozone in lustre 1.6.5 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/iozone.log temporary file.

Affected products

• Lustre Lustre-Tests: version 1.6.5 only; version 1.6.5.1 only

Published 2008-11-06. Last modified 2026-06-16.