Lucene search

K
prionPRIOn knowledge basePRION:CVE-2009-5080
HistoryJun 30, 2011 - 3:55 p.m.

Directory traversal

2011-06-3015:55:00
PRIOn knowledge base
www.prio-n.com
4

6.2 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

The (1) contrib/eqn2graph/eqn2graph.sh, (2) contrib/grap2graph/grap2graph.sh, and (3) contrib/pic2graph/pic2graph.sh scripts in GNU troff (aka groff) 1.21 and earlier do not properly handle certain failed attempts to create temporary directories, which might allow local users to overwrite arbitrary files via a symlink attack on a file in a temporary directory, a different vulnerability than CVE-2004-1296.

Rows per page:
1-10 of 161

6.2 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%