Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2009-5044

contrib/pdfmark/pdfroff.sh in GNU troff (aka groff) before 1.21 allows local users to overwrite arbitrary files via a symlink attack on a pdf#####.tmp temporary file.

Published

2011-06-24T20:55:01.607

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 3.3 (LOW)

CVSSv2 Vector

AV:L/AC:M/Au:N/C:N/I:P/A:P

Access Vector: LOCAL
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: NONE
Integrity Impact: PARTIAL
Availability Impact: PARTIAL

Exploitability Score

3.4

Impact Score

4.9

Weaknesses

Type: Primary
CWE-59

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	apple	mac_os_x	≤ 10.10.4	Yes
Application	gnu	groff	≤ 1.20.1	Yes
Application	gnu	groff	1.10	Yes
Application	gnu	groff	1.11	Yes
Application	gnu	groff	1.11a	Yes
Application	gnu	groff	1.14	Yes
Application	gnu	groff	1.15	Yes
Application	gnu	groff	1.16	Yes
Application	gnu	groff	1.16.1	Yes
Application	gnu	groff	1.17.1	Yes
Application	gnu	groff	1.17.2	Yes
Application	gnu	groff	1.18.1	Yes
Application	gnu	groff	1.19	Yes
Application	gnu	groff	1.19.1	Yes
Application	gnu	groff	1.19.2	Yes
Application	gnu	groff	1.20	Yes

References

ftp://ftp.gnu.org/gnu/groff/groff-1.20.1-1.21.diff.gz Patch ([email protected])
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=538330 ([email protected])
http://cvsweb.openwall.com/cgi/cvsweb.cgi/Owl/packages/groff/groff-1.20.1-owl-tmp.diff Patch ([email protected])
http://cvsweb.openwall.com/cgi/cvsweb.cgi/Owl/packages/groff/groff-1.20.1-owl-tmp.diff.diff?r1=1.1%3Br2=1.2%3Bf=h ([email protected])
http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html ([email protected])
http://openwall.com/lists/oss-security/2009/08/09/1 ([email protected])
http://openwall.com/lists/oss-security/2009/08/10/2 ([email protected])
http://openwall.com/lists/oss-security/2009/08/14/4 ([email protected])
http://openwall.com/lists/oss-security/2009/08/14/5 ([email protected])
http://secunia.com/advisories/44999 Vendor Advisory ([email protected])
http://www.mandriva.com/security/advisories?name=MDVSA-2013:085 ([email protected])
http://www.mandriva.com/security/advisories?name=MDVSA-2013:086 ([email protected])
http://www.securityfocus.com/bid/36381 ([email protected])
https://support.apple.com/kb/HT205031 ([email protected])
ftp://ftp.gnu.org/gnu/groff/groff-1.20.1-1.21.diff.gz Patch (af854a3a-2127-422b-91ae-364da2661108)
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=538330 (af854a3a-2127-422b-91ae-364da2661108)
http://cvsweb.openwall.com/cgi/cvsweb.cgi/Owl/packages/groff/groff-1.20.1-owl-tmp.diff Patch (af854a3a-2127-422b-91ae-364da2661108)
http://cvsweb.openwall.com/cgi/cvsweb.cgi/Owl/packages/groff/groff-1.20.1-owl-tmp.diff.diff?r1=1.1%3Br2=1.2%3Bf=h (af854a3a-2127-422b-91ae-364da2661108)
http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html (af854a3a-2127-422b-91ae-364da2661108)
http://openwall.com/lists/oss-security/2009/08/09/1 (af854a3a-2127-422b-91ae-364da2661108)
http://openwall.com/lists/oss-security/2009/08/10/2 (af854a3a-2127-422b-91ae-364da2661108)
http://openwall.com/lists/oss-security/2009/08/14/4 (af854a3a-2127-422b-91ae-364da2661108)
http://openwall.com/lists/oss-security/2009/08/14/5 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/44999 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.mandriva.com/security/advisories?name=MDVSA-2013:085 (af854a3a-2127-422b-91ae-364da2661108)
http://www.mandriva.com/security/advisories?name=MDVSA-2013:086 (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/36381 (af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/kb/HT205031 (af854a3a-2127-422b-91ae-364da2661108)