CVE-2000-0803 in Groff
Summary
GNU Groff uses the current working directory to find a device description file, which allows a local user to gain additional privileges by including a malicious postpro directive in the description file, which is executed when another user runs groff.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Disclosure
12/19/2000
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 16101 | GNU Groff Device Description File privileges management | 269 | Not defined | Not defined | CVE-2000-0803 |