senddoc in OpenOffice.org (OOo) 2.4.1 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/log.obr.##### temporar…

Published 18 y ago 2008-11-05 · modified 4 mo ago 2026-06-16 · JSON

CVSS

2.6

v2.0 · NVD

CISA KEV

not known exploited

EPSS

0.4%

percentile 39%

Public exploits

none known

senddoc in OpenOffice.org (OOo) 2.4.1 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/log.obr.##### temporary file.

Exploit prediction (EPSS)

0.45% probability of exploitation in the next 30 days, higher than 39% of all scored CVEs.

Assigned by	Version	Score	Vector
NVD	2.0	2.6	`AV:L/AC:H/Au:N/C:N/I:P/A:P`

Weakness

ubuntu.com /usn/usn-677-2 · vendor-advisory, x_refsource_UBUNTU, x_transferred
secunia.com /advisories/32856 · third-party-advisory, x_refsource_SECUNIA, x_transferred
bugs.debian.org /496361 · x_refsource_CONFIRM, x_transferred
exchange.xforce.ibmcloud.com /vulnerabilities/44829 · vdb-entry, x_refsource_XF, x_transferred
securityfocus.com /bid/30925 · vdb-entry, x_refsource_BID, x_transferred
openwall.com /lists/oss-security/2008/10/30/2 · mailing-list, x_refsource_MLIST, x_transferred
bugs.gentoo.org /show_bug.cgi?id=235770 · x_refsource_CONFIRM, x_transferred
uvw.ru /report.lenny.txt · x_refsource_MISC, x_transferred
ubuntu.com /usn/usn-677-1 · vendor-advisory, x_refsource_UBUNTU, x_transferred
security.gentoo.org /glsa/glsa-200812-13.xml · vendor-advisory, x_refsource_GENTOO, x_transferred
dev.gentoo.org /~rbu/security/debiantemp/openoffice.org-common · x_refsource_CONFIRM, x_transferred
bugs.gentoo.org /235824 · x_refsource_CONFIRM, x_transferred
secunia.com /advisories/33140 · third-party-advisory, x_refsource_SECUNIA, x_transferred
mandriva.com /security/advisories?name=MDVSA-2009:070 · vendor-advisory, x_refsource_MANDRIVA, x_transferred

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.