Groff@1.20.1 Security Vulnerabilities and Issues — Groff@1.20.1 CVE List

Lucene search

GnuGroff1.20.1

4 matches found

CVE•added 2011/06/30 3:55 p.m.•95 views

CVE-2009-5080

The (1) contrib/eqn2graph/eqn2graph.sh, (2) contrib/grap2graph/grap2graph.sh, and (3) contrib/pic2graph/pic2graph.sh scripts in GNU troff (aka groff) 1.21 and earlier do not properly handle certain failed attempts to create temporary directories, which might allow local users to overwrite arbitrary...

3.3CVSS6AI score0.00149EPSS

CVE•added 2011/06/30 3:55 p.m.•59 views

CVE-2009-5082

The (1) configure and (2) config.guess scripts in GNU troff (aka groff) 1.20.1 on Openwall GNU/*/Linux (aka Owl) improperly create temporary files upon a failure of the mktemp function, which makes it easier for local users to overwrite arbitrary files via a symlink attack on a temporary file.

3.3CVSS6.1AI score0.00031EPSS

CVE•added 2011/06/30 3:55 p.m.•51 views

CVE-2009-5081

The (1) config.guess, (2) contrib/groffer/perl/groffer.pl, and (3) contrib/groffer/perl/roff2.pl scripts in GNU troff (aka groff) 1.21 and earlier use an insufficient number of X characters in the template argument to the tempfile function, which makes it easier for local users to overwrite arbitra...

3.3CVSS6.2AI score0.00122EPSS

CVE•added 2011/06/30 3:55 p.m.•39 views

CVE-2009-5079

The (1) gendef.sh, (2) doc/fixinfo.sh, and (3) contrib/gdiffmk/tests/runtests.in scripts in GNU troff (aka groff) 1.21 and earlier allow local users to overwrite arbitrary files via a symlink attack on a gro#####.tmp or /tmp/##### temporary file.

3.3CVSS6.1AI score0.00036EPSS