{"id":"GHSA-x7r4-26m9-hmgq","aliases":["CVE-2008-5153"],"title":"Moodle vulnerable to symlink attack","titleSource":"OSV","descriptionSource":"OSV","declaredSeverity":"MODERATE","description":"`spell-check-logic.cgi` in Moodle 1.9 before 1.9.4, 1.8 before 1.8.8, 1.7 before 1.7.7 and 1.6 before 1.6.9 allows local users to overwrite arbitrary files via a symlink attack on the (1) `/tmp/spell-check-debug.log`, (2) `/tmp/spell-check-before`, or (3) `/tmp/spell-check-after` temporary file.","severity":"medium","score":null,"published":"2022-05-17T02:18:02.000Z","modified":"2024-02-09T19:12:29.532Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"moodle/moodle","sources":[{"name":"OSV · GHSA-x7r4-26m9-hmgq","url":"https://osv.dev/vulnerability/GHSA-x7r4-26m9-hmgq"}],"ranges":[{"events":[{"introduced":"1.9.0"},{"fixed":"1.9.4"}],"type":"ECOSYSTEM"}],"versions":[],"fixed":["1.9.4"]},{"ecosystem":"Packagist","name":"moodle/moodle","sources":[{"name":"OSV · GHSA-x7r4-26m9-hmgq","url":"https://osv.dev/vulnerability/GHSA-x7r4-26m9-hmgq"}],"ranges":[{"events":[{"introduced":"1.8.0"},{"fixed":"1.8.8"}],"type":"ECOSYSTEM"}],"versions":[],"fixed":["1.8.8"]},{"ecosystem":"Packagist","name":"moodle/moodle","sources":[{"name":"OSV · GHSA-x7r4-26m9-hmgq","url":"https://osv.dev/vulnerability/GHSA-x7r4-26m9-hmgq"}],"ranges":[{"events":[{"introduced":"1.7.0"},{"fixed":"1.7.7"}],"type":"ECOSYSTEM"}],"versions":[],"fixed":["1.7.7"]},{"ecosystem":"Packagist","name":"moodle/moodle","sources":[{"name":"OSV · GHSA-x7r4-26m9-hmgq","url":"https://osv.dev/vulnerability/GHSA-x7r4-26m9-hmgq"}],"ranges":[{"events":[{"introduced":"1.6.0"},{"fixed":"1.6.9"}],"type":"ECOSYSTEM"}],"versions":[],"fixed":["1.6.9"]}],"sourceAffected":[],"references":["https://nvd.nist.gov/vuln/detail/CVE-2008-5153","https://exchange.xforce.ibmcloud.com/vulnerabilities/46708","https://github.com/moodle/moodle","https://web.archive.org/web/20090821033319/http://secunia.com/advisories/33955","https://web.archive.org/web/20110511083352/http://uvw.ru/report.sid.txt","https://web.archive.org/web/20141121115305/http://www.securityfocus.com/bid/32402","http://lists.debian.org/debian-devel/2008/08/msg00347.html","http://www.debian.org/security/2009/dsa-1724"],"sources":[{"name":"OSV","id":"GHSA-x7r4-26m9-hmgq","modified":"2024-02-09T19:12:29.532406Z","url":"https://osv.dev/vulnerability/GHSA-x7r4-26m9-hmgq"}],"assessments":[],"products":[],"remediation":[],"kev":{"status":"not-listed","checkedAt":"2026-10-28T18:20:33.032Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[]}