CVE-2008-4987: xastir 1.9.2 allows local users to overwrite arbitrary files via a symlink attack on the (a) /tmp/ldconfig....

Security readout for executives and security teams

CVE-2008-4987 is an old local file-overwrite issue in Xastir 1.9.2 helper scripts. A person with local access could abuse predictable temporary files in /tmp to cause another file to be overwritten when the scripts run. Sources do not show internet exposure or active exploitation. Likely exposure is limited to legacy systems with Xastir 1.9.2 installed, especially multi-user Unix-like hosts where local users can access /tmp and the helper scripts may run with higher privileges. Treat this as a legacy local-risk cleanup item, not an emergency internet-facing vulnerability. Prioritize if Xastir exists on shared or privileged systems; otherwise address through normal vulnerability hygiene. Mitigation focus: Check vendor or distribution advisories for the corrected Xastir package.; Upgrade or remove Xastir 1.9.2 where it remains installed.; Restrict use of affected helper scripts until vendor guidance is applied..

Prepared

Jun 28, 2026, 18:15 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.