PT-2011-1196 · Gnu+1 · Groff+1

Nico Golde · Published 2011-06-24 · Updated 2024-06-15 · CVE-2009-5044

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions groff versions prior to 1.22.2

Description The issue concerns multiple vulnerabilities in the groff package that can lead to the disruption of integrity and availability of protected information. These vulnerabilities can be exploited remotely. Additionally, there is a specific vulnerability in the contrib/pdfmark/pdfroff.sh component of GNU troff that allows local users to overwrite arbitrary files via a symlink attack on a temporary file.

Recommendations For groff versions prior to 1.22.2, update to version 1.22.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the contrib/pdfmark/pdfroff.sh component to minimize the risk of exploitation.

Fix

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

ALT-PU-2016-1079

BDU:2015-09687

CVE-2009-5044

OPENSUSE-SU-2024:10031-1

Affected Products

Alt Linux

Groff

References · 31

• http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2016-1079 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-5078 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:10031-1 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2013:085 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2009-5044 · Vendor Advisory
• ftp://ftp.gnu.org/gnu/groff/groff-1.20.1-1.21.diff.gz · Patch
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-5081 · Security Note
• http://cvsweb.openwall.com/cgi/cvsweb.cgi/Owl/packages/groff/groff-1.20.1-owl-tmp.diff · Patch
• http://mandriva.com/security/advisories?name=MDVSA-2013:086 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2009-5044 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-5079 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2009-5044 · Vendor Advisory
• http://secunia.com/advisories/44999 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-5080 · Security Note