CVE-2008-4996

Name	CVE-2008-4996
Description	init in initramfs-tools 0.92f allows local users to overwrite arbitrary files via a symlink attack on the /tmp/initramfs.debug temporary file. NOTE: the vendor disputes this vulnerability, stating that "init is [used in] a single-user context; there's no possibility that this is exploitable.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
Debian Bugs	496386

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
initramfs-tools (PTS)	jessie	0.120+deb8u3	vulnerable
	stretch	0.130	vulnerable
	buster	0.133+deb10u1	vulnerable
	bullseye	0.140	vulnerable
	bookworm	0.142+deb12u1	vulnerable
	sid, trixie	0.145	vulnerable

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
initramfs-tools	source	(unstable)	(unfixed)	unimportant		496386