Vulnerability in Lukas Ruf Muttprint

CVE-2008-5368

muttprint in muttprint 0.72d allows local users to overwrite arbitrary files via a symlink attack on the /tmp/muttprint.log temporary file.

Published 2008-12-08 · last modified 2026-06-16.

CVSS v2 metric

CVSS v2 base score 6.9 (Medium). Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C. This CVE predates CVSS v3 and has no v3 score from NVD.

EPSS exploit prediction

EPSS: 0.003 (19.0th percentile), scored 2026-10-01.

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 19th percentile — 19.0% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.003 · newest: 0.003 · change: 0.000

Affected products

Lukas Ruf Muttprint — versions 0.72d

Weakness classification (CWE)

CWE-59 — Improper Link Resolution Before File Access

References

www.gentoo.org/security/en/glsa/glsa-200903-35.xml (vendor-advisory)
lists.debian.org/debian-devel/2008/08/msg00283.html (mailing-list)
secunia.com/advisories/34439 (third-party-advisory)