CVE-2009-5080

The (1) contrib/eqn2graph/eqn2graph.sh, (2) contrib/grap2graph/grap2graph.sh, and (3) contrib/pic2graph/pic2graph.sh scripts in GNU troff (aka groff) 1.21 and earlier do not properly handle certain failed attempts to create temporary directories, which might allow local users to overwrite arbitrary files via a symlink attack on a file in a temporary directory, a different vulnerability than CVE-2004-1296.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:gnu:groff:*:*:*:*:*:*:*:*
cpe:2.3:a:gnu:groff:1.10:*:*:*:*:*:*:*
cpe:2.3:a:gnu:groff:1.11:*:*:*:*:*:*:*
cpe:2.3:a:gnu:groff:1.11a:*:*:*:*:*:*:*
cpe:2.3:a:gnu:groff:1.14:*:*:*:*:*:*:*
cpe:2.3:a:gnu:groff:1.15:*:*:*:*:*:*:*
cpe:2.3:a:gnu:groff:1.16:*:*:*:*:*:*:*
cpe:2.3:a:gnu:groff:1.16.1:*:*:*:*:*:*:*
cpe:2.3:a:gnu:groff:1.17.1:*:*:*:*:*:*:*
cpe:2.3:a:gnu:groff:1.17.2:*:*:*:*:*:*:*
cpe:2.3:a:gnu:groff:1.18.1:*:*:*:*:*:*:*
cpe:2.3:a:gnu:groff:1.19:*:*:*:*:*:*:*
cpe:2.3:a:gnu:groff:1.19.1:*:*:*:*:*:*:*
cpe:2.3:a:gnu:groff:1.19.2:*:*:*:*:*:*:*
cpe:2.3:a:gnu:groff:1.20:*:*:*:*:*:*:*
cpe:2.3:a:gnu:groff:1.20.1:*:*:*:*:*:*:*

History

07 Nov 2023, 02:04

Type Values Removed Values Added
References
  • {'url': 'http://cvsweb.openwall.com/cgi/cvsweb.cgi/Owl/packages/groff/groff-1.20.1-owl-tmp.diff.diff?r1=1.1;r2=1.2;f=h', 'name': 'http://cvsweb.openwall.com/cgi/cvsweb.cgi/Owl/packages/groff/groff-1.20.1-owl-tmp.diff.diff?r1=1.1;r2=1.2;f=h', 'tags': ['Patch'], 'refsource': 'CONFIRM'}
  • () http://cvsweb.openwall.com/cgi/cvsweb.cgi/Owl/packages/groff/groff-1.20.1-owl-tmp.diff.diff?r1=1.1%3Br2=1.2%3Bf=h -

Information

Published : 2011-06-30 15:55

Updated : 2024-02-28 11:41


NVD link : CVE-2009-5080

Mitre link : CVE-2009-5080

CVE.ORG link : CVE-2009-5080


JSON object : View

Products Affected

gnu

  • groff
CWE
CWE-59

Improper Link Resolution Before File Access ('Link Following')