CVE-2008-1570: Race condition in the create_lockpath function in policyd-weight 0.1.14 beta-16 allows local users to modif...

Security readout for executives and security teams

CVE-2008-1570 is a local file-tampering flaw in policyd-weight 0.1.14 beta-16. A local user could exploit a race condition around lock directory creation to modify or delete files they should not control. It matters mainly on systems where untrusted local users or compromised service accounts can interact with the host. Exposure is likely limited to hosts running policyd-weight 0.1.14 beta-16, especially shared or mail infrastructure where local users or compromised processes have filesystem access. The source bundle does not identify broader affected versions or package names beyond this version. Treat this as a targeted legacy exposure issue, not an internet-wide emergency. Prioritize if policyd-weight 0.1.14 beta-16 exists on production mail or shared systems, because the reported impact includes arbitrary file modification or deletion by local users. Mitigation focus: Inventory systems for policyd-weight 0.1.14 beta-16.; Review Gentoo and vendor advisories for fixed package guidance.; Restrict local shell access on affected hosts..

Prepared

Jun 28, 2026, 19:09 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.