CVE-2008-4978: radiance 3R9+20080530 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/opt....

Security readout for executives and security teams

This is an old local file overwrite issue in Radiance scripts. A user with local access may abuse predictable temporary files in /tmp to overwrite files the script process can write. The bundle does not show remote exploitation or active exploitation. Exposure is most likely on systems with Radiance 3R9+20080530 installed where untrusted local users can run the affected scripts or influence privileged jobs that run them. Treat as a targeted local-risk issue, not an internet-wide emergency. Prioritize shared Linux systems, research workstations, and any privileged automation using Radiance scripts. Mitigation focus: Check Radiance and distribution guidance for patched packages or script fixes.; Upgrade or replace affected Radiance packages where vendor fixes are available.; Avoid running affected scripts through sudo, cron, or privileged automation..

Prepared

Jun 28, 2026, 18:15 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.