CVE-2000-0803 GNU Groff uses the current working directory to find a device description file, which allows a local user to gain additional privileges by including a malicious postpro directive in the description fi...
HighCVSS 10.0
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
GNU Groff uses the current working directory to find a device description file, which allows a local user to gain additional privileges by including a malicious postpro directive in the description file, which is executed when another user runs groff.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| GNU groff | < 1.17 | 1.17 |
References
- gnu-groff-utilities(5280) vdb-entry