CVE-2008-5007: create_lazarus_export_tgz.sh in lazarus 0.9.24 allows local users to overwrite or delete arbitrary files vi...

Security readout for executives and security teams

CVE-2008-5007 is a local file overwrite/delete risk in a Lazarus 0.9.24 export script. A local user could abuse predictable temporary paths if the script is run, especially with elevated privileges. Exposure is most likely on legacy systems with Lazarus 0.9.24 source or packaging scripts present. Risk depends on local user access and whether the script is executed, particularly by privileged accounts. Treat as a legacy hygiene issue unless affected tooling exists on shared or multi-user systems. Prioritize remediation where privileged users run the script or where local accounts are broadly available. Mitigation focus: Check vendor or distribution guidance for Lazarus 0.9.24 fixes.; Apply available distro patches addressing unsafe temporary file handling.; Avoid running the vulnerable export script as root or privileged users..

Prepared

Jun 28, 2026, 18:15 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.