CVE-2008-4969: ltp-network-test 20060918 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/...

Security readout for executives and security teams

This is an old local file-overwrite issue in ltp-network-test 20060918. A local user could abuse predictable temporary file paths used by test scripts to cause files to be overwritten. Business urgency depends on whether this legacy network test package exists and whether untrusted local users can access the host. Exposure appears narrow: hosts with ltp-network-test 20060918 installed or used, especially multi-user systems where these scripts run with elevated privileges. The provided data does not identify modern affected distributions or supported products. Treat as a targeted legacy hygiene item, not an internet-wide emergency. Prioritize confirmation on shared Linux systems and production hosts where old test packages may have been left installed. Mitigation focus: Inventory systems for ltp-network-test 20060918 or packaged derivatives.; Check vendor or distribution guidance for fixed packages or removal advice.; Avoid running affected test scripts as root on shared systems..

Prepared

Jun 28, 2026, 18:33 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.