CVE-2004-0969 The groffer script in the Groff package 1.18 and later versions, as used in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a syml...
LowCVSS 2.1
EPSS 0.37%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The groffer script in the Groff package 1.18 and later versions, as used in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| GNU groff | = 1.19 | No fix listed |
| gentoo linux | All versions | No fix listed |
| ubuntu linux | = 4.1 | No fix listed |
| debian/groff(Debian:12) | < 1.18.1.1-2 | 1.18.1.1-2 |
| debian/groff(Debian:13) | < 1.18.1.1-2 | 1.18.1.1-2 |
| debian/groff(Debian:14) | < 1.18.1.1-2 | 1.18.1.1-2 |
References
- bugzilla.redhat.com
- 18764 third-party-advisory
- GLSA-200411-15 patch vendor-advisory
- 11287 patch vdb-entry vendor-advisory
- 2004-0050 vendor-advisory
- MDKSA-2006:038 vendor-advisory
- script-temporary-file-overwrite(17583) vdb-entry
- Debian Security Tracker CVE-2004-0969 vendor-advisory