CVE-2009-5081

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2009-5081
The (1) config.guess, (2) contrib/groffer/perl/groffer.pl, and (3) contrib/groffer/perl/roff2.pl scripts in GNU troff (aka groff) 1.21 and earlier use an insufficient number of X characters in the template argument to the tempfile function, which makes it easier for local users to overwrite arbitrary files via a symlink attack on a temporary file, a different vulnerability than CVE-2004-0969.

3.3 /10

CVSS v2.0 : LOW

V2 Legend

Vector : AV:L/AC:M/Au:N/C:N/I:P/A:P

Exploitability : 3.4 / Impact : 4.9

Access Vector LOCAL

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
http://cvsweb.openwall.com/cgi/cvsweb.cgi/Owl/packages/groff/groff-1.20.1-owl-tmp.diff Patch
http://cvsweb.openwall.com/cgi/cvsweb.cgi/Owl/packages/groff/groff-1.20.1-owl-tmp.diff.diff?r1=1.1%3Br2=1.2%3Bf=h
http://openwall.com/lists/oss-security/2009/08/14/4 Patch
http://openwall.com/lists/oss-security/2009/08/14/5 Patch
http://www.mandriva.com/security/advisories?name=MDVSA-2013:086
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:gnu:groff:*:*:*:*:*:*:*:*
cpe:2.3:a:gnu:groff:1.10:*:*:*:*:*:*:*
cpe:2.3:a:gnu:groff:1.11:*:*:*:*:*:*:*
cpe:2.3:a:gnu:groff:1.11a:*:*:*:*:*:*:*
cpe:2.3:a:gnu:groff:1.14:*:*:*:*:*:*:*
cpe:2.3:a:gnu:groff:1.15:*:*:*:*:*:*:*
cpe:2.3:a:gnu:groff:1.16:*:*:*:*:*:*:*
cpe:2.3:a:gnu:groff:1.16.1:*:*:*:*:*:*:*
cpe:2.3:a:gnu:groff:1.17.1:*:*:*:*:*:*:*
cpe:2.3:a:gnu:groff:1.17.2:*:*:*:*:*:*:*
cpe:2.3:a:gnu:groff:1.18.1:*:*:*:*:*:*:*
cpe:2.3:a:gnu:groff:1.19:*:*:*:*:*:*:*
cpe:2.3:a:gnu:groff:1.19.1:*:*:*:*:*:*:*
cpe:2.3:a:gnu:groff:1.19.2:*:*:*:*:*:*:*
cpe:2.3:a:gnu:groff:1.20:*:*:*:*:*:*:*
cpe:2.3:a:gnu:groff:1.20.1:*:*:*:*:*:*:*
History

07 Nov 2023, 02:04

Type Values Removed Values Added
References
  • {'url': 'http://cvsweb.openwall.com/cgi/cvsweb.cgi/Owl/packages/groff/groff-1.20.1-owl-tmp.diff.diff?r1=1.1;r2=1.2;f=h', 'name': 'http://cvsweb.openwall.com/cgi/cvsweb.cgi/Owl/packages/groff/groff-1.20.1-owl-tmp.diff.diff?r1=1.1;r2=1.2;f=h', 'tags': ['Patch'], 'refsource': 'CONFIRM'}
  • () http://cvsweb.openwall.com/cgi/cvsweb.cgi/Owl/packages/groff/groff-1.20.1-owl-tmp.diff.diff?r1=1.1%3Br2=1.2%3Bf=h -
Information

Published : 2011-06-30 15:55

Updated : 2023-12-10 11:03

NVD link : CVE-2009-5081

Mitre link : CVE-2009-5081

CVE.ORG link : CVE-2009-5081

JSON object : View

Products Affected

gnu

  • groff
CWE
CWE-59

Improper Link Resolution Before File Access ('Link Following')