{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"python-defaults","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:11","exploited":false,"fixed_versions":[],"id":"tcs_01M5N93JG6JZE254XXSV25W9TR","modified_at":"2026-08-04T06:03:19.807641442Z","published_at":"2008-09-18T17:59:33.093Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2008-4108","https://security-tracker.debian.org/tracker/CVE-2008-4108"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2008-4108","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2008-4108"}],"summary":"Tools/faqwiz/move-faqwiz.sh (aka the generic FAQ wizard moving tool) in Python 2.4.5 might allow local users to overwrite arbitrary files via a symlink attack on a tmp$RANDOM.tmp temporary file. NOTE:"}