PT-2011-1199 · Gnu+1 · Groff+1

Nico Golde · Published 2011-06-30 · Updated 2024-06-15 · CVE-2009-5080

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions groff versions prior to 1.22.2

Description The issue affects the groff package in Gentoo Linux and concerns multiple vulnerabilities that can be exploited remotely, potentially leading to a breach of data integrity and availability. Specifically, in GNU troff (also known as groff) version 1.21 and earlier, certain scripts do not properly handle failed attempts to create temporary directories. This could allow local users to overwrite arbitrary files via a symlink attack on a file in a temporary directory. The affected scripts include eqn2graph.sh, grap2graph.sh, and pic2graph.sh.

Recommendations For groff versions prior to 1.22.2, update to version 1.22.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the eqn2graph.sh, grap2graph.sh, and pic2graph.sh scripts until a patch is available.

Fix

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

ALT-PU-2016-1079

BDU:2015-09687

CVE-2009-5080

OPENSUSE-SU-2024:10031-1

Affected Products

Alt Linux

Groff

References · 26

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-5079 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-5081 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2009-5080 · Vendor Advisory
• http://openwall.com/lists/oss-security/2009/08/14/5 · Patch
• https://errata.altlinux.org/ALT-PU-2016-1079 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-5078 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:10031-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-5044 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-5080 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2009-5080 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2009-5080 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2013:085 · Vendor Advisory
• http://cvsweb.openwall.com/cgi/cvsweb.cgi/Owl/packages/groff/groff-1.20.1-owl-tmp.diff · Patch
• https://bdu.fstec.ru/vul/2015-09687 · Security Note
• http://mandriva.com/security/advisories?name=MDVSA-2013:086 · Vendor Advisory