CVE-2009-5080 in groff
Сводка (Английский)
The (1) contrib/eqn2graph/eqn2graph.sh, (2) contrib/grap2graph/grap2graph.sh, and (3) contrib/pic2graph/pic2graph.sh scripts in GNU troff (aka groff) 1.21 and earlier do not properly handle certain failed attempts to create temporary directories, which might allow local users to overwrite arbitrary files via a symlink attack on a file in a temporary directory, a different vulnerability than CVE-2004-1296.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Резервировать
30.06.2011
Раскрытие
30.06.2011
Статус
Подтверждённый
Записи
VulDB provides additional information and datapoints for this CVE:
| ИД | Уязвимость | CWE | Экс | Кон | CVE |
|---|---|---|---|---|---|
| 57805 | GNU groff эскалация привилегий | 59 | Не определено | Не определено | CVE-2009-5080 |