CVE-2001-1022

Format string vulnerability in pic utility in groff 1.16.1 and other versions, and jgroff before 1.15, allows remote attackers to bypass the -S option and execute arbitrary commands via format string specifiers in the plot command...

CVE-2002-0003

CVE-2002-0003 describes a buffer overflow in the groff preprocessor (groff 1.16 and earlier) that can allow remote attackers to gain privileges via the LPRng printing system when groff is invoked through lpd. The vulnerability affects the preprocessor and can enable privilege escalation to the lp...

CVE-2001-1022: Undefined Security Weakness

Format string vulnerability in pic utility in groff 1.16.1 and other versions, and jgroff before 1.15, allows remote attackers to bypass the -S option and execute arbitrary commands via format string specifiers in the plot command...

CVE-2002-0003: Undefined Security Weakness

Buffer overflow in the preprocessor in groff 1.16 and earlier allows remote attackers to gain privileges via lpd in the LPRng printing system...

CVE-2002-0003

Buffer overflow in the preprocessor in groff 1.16 and earlier allows remote attackers to gain privileges via lpd in the LPRng printing system...

Important: Red Hat Security Advisory: : : : New groff packages available to fix security problems

New groff packages have been made available that fix an overflow in groff. If the printing system running this is a security issue, it is recommended to update to the new, fixed packages. Update Jan 22 2003 Added description of CVE-2001-1022 which was also fixed by these erratum packages Groff is...

[SECURITY] [DSA-072-1] groff printf format problem

Package : groff Problem type : printf format attack Debian-specific: no Zenith Parse found a security problem in groff the GNU version of troff. The pic command was vulnerable to a printf format attack which made it possible to circumvent the -S option and execute arbitrary code. This has been...

Ошибка форматной строки в groff (format string)

Ошибка форматной строки в /usr/bin/pic используемой LPD...

CVE-2001-1022

Format string vulnerability in pic utility in groff 1.16.1 and other versions, and jgroff before 1.15, allows remote attackers to bypass the -S option and execute arbitrary commands via format string specifiers in the plot command...

GNU groff 1.1x - xploitation Via LPD

GNU groff 1.1x - xploitation Via LPD // source: https://www.securityfocus.com/bid/3103/info lpd is the print spooling daemon. It is used to support network printing on a variety of unix platforms. The version of lpd that ships with linux systems invokes groff to process documents that are to be...

GNU groff 1.1x - xploitation Via LPD

// source: https://www.securityfocus.com/bid/3103/info lpd is the print spooling daemon. It is used to support network printing on a variety of unix platforms. The version of lpd that ships with linux systems invokes groff to process documents that are to be printed. The groff utility used to...

CVE-2000-0803

GNU Groff is affected by a local privilege escalation vulnerability in which the program searches the current working directory for a device description file. The underlying issue is a directory-based lookup (postpro directive) that, if a malicious device description file is present, can execute ...

CVE-2000-0803

GNU Groff uses the current working directory to find a device description file, which allows a local user to gain additional privileges by including a malicious postpro directive in the description file, which is executed when another user runs groff...

CVE-2000-0803

GNU Groff uses the current working directory to find a device description file, which allows a local user to gain additional privileges by including a malicious postpro directive in the description file, which is executed when another user runs groff...

CVE-2000-0803: Undefined Security Weakness

GNU Groff uses the current working directory to find a device description file, which allows a local user to gain additional privileges by including a malicious postpro directive in the description file, which is executed when another user runs groff...

Linux news 6.10.00

Ваш билет до Windows 2000 Примечательное начало: как бы вы ни относились к Microsoft, трудно отрицать, что Windows 2000 Professional - это на сегодня самая стабильная и мощная версия Windows. Если вы были бы рады избавиться от изъянов и ограничений Windows 95 или 98, но не собираетесь в ближайшее...

GNU groff 1.11 a HP-UX 10.011.0 SGI IRIX 6.5.3 - Malicious Manpage

GNU groff 1.11 a HP-UX 10.011.0 SGI IRIX 6.5.3 - Malicious Manpage source: https://www.securityfocus.com/bid/540/info Versions of GNU groff prior to release 1.11a and standard troff contain vulnerabilities that can possibly lead to a local root compromise if the conditions are right and...

GNU groff 1.11 a / HP-UX 10.0/11.0 / SGI IRIX 6.5.3 - Malicious Manpage

source: https://www.securityfocus.com/bid/540/info Versions of GNU groff prior to release 1.11a and standard troff contain vulnerabilities that can possibly lead to a local root compromise if the conditions are right and circumstances are somehow met. A malicious user can, in theory, embed t/g|ro...