EUVD-2004-1293

Malware in sbrugna...

EUVD-2002-0003

Malware in sbrugna...

EUVD-2000-0797

Malware in sbrugna...

OPENSUSE-SU-2024:10031-1 groff-1.22.3-2.5 on GA media

These are all security issues fixed in the groff-1.22.3-2.5 package on the GA media of openSUSE Tumbleweed...

RHEL 4 : groff (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 4 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - groff: improper handling of failed attempts to create temporary directories in eqn2graph/pic2graph/grap2graph...

RHEL 5 : groff (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - groff: improper handling of failed attempts to create temporary directories in eqn2graph/pic2graph/grap2graph...

RHEL 6 : groff (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - groff: improper handling of failed attempts to create temporary directories in eqn2graph/pic2graph/grap2graph...

NewStart CGSL MAIN 5.04 : groff Multiple Vulnerabilities (NS-SA-2023-0067)

The remote NewStart CGSL host, running version MAIN 5.04, has groff packages installed that are affected by multiple vulnerabilities: - contrib/pdfmark/pdfroff.sh in GNU troff aka groff before 1.21 allows local users to overwrite arbitrary files via a symlink attack on a pdf.tmp temporary file...

SUSE CVE-2004-0969

The groffer script in the Groff package 1.18 and later versions, as used in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files...

SUSE CVE-2004-1296

The 1 eqn2graph and 2 pic2graph scripts in groff 1.18.1 allow local users to overwrite arbitrary files via a symlink attack on temporary files...

SUSE CVE-2009-5081

The 1 config.guess, 2 contrib/groffer/perl/groffer.pl, and 3 contrib/groffer/perl/roff2.pl scripts in GNU troff aka groff 1.21 and earlier use an insufficient number of X characters in the template argument to the tempfile function, which makes it easier for local users to overwrite arbitrary fil...

SUSE CVE-2009-5080

The 1 contrib/eqn2graph/eqn2graph.sh, 2 contrib/grap2graph/grap2graph.sh, and 3 contrib/pic2graph/pic2graph.sh scripts in GNU troff aka groff 1.21 and earlier do not properly handle certain failed attempts to create temporary directories, which might allow local users to overwrite arbitrary files...

Ubuntu: Security Advisory (USN-13-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-43-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

new packages: groff

An update is available for groff. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9.0...

Slackware: Security Advisory (SSA:2005-251-03)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2000-0803 affecting package groff 1.22.3-5

CVE-2000-0803 affecting package groff 1.22.3-5. A patched version of the package is available...

GNU Groff uses the current working directory to find a device description file which allows a local user to gain additional privileges by including a malicious postpro directive in the description file which is executed when another user runs groff.

...

OWASP D4N155 - Intelligent And Dynamic Wordlist Using OSINT

It's an information security audit tool that creates intelligent wordlists based on the content of the target page. Help us See some calculations used Install Need to: Python3.6, Bash GNU Bourne-Again SHell Optional: Git, Groff git clone https://github.com/owasp/D4N155.git cd D4N155 pip3 install ...

CVE-2004-1296

The 1 eqn2graph and 2 pic2graph scripts in groff 1.18.1 allow local users to overwrite arbitrary files via a symlink attack on temporary files...