CVE-2008-5366: Marco D'itri Ppp

Medium severity, CVSS 6.9. EPSS: 0.4% chance of exploitation in the next 30 days.

The postinst script in ppp 2.4.4rel on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/probe-finished or (2) /tmp/ppp-errors temporary file.

Affected products

• Marco D'itri Ppp: version 2.4.4 only

Published 2008-12-08. Last modified 2026-06-16.