CVE-2009-5079

Related Files

Gentoo Linux Security Advisory 201310-14

Posted Oct 25, 2013

Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory 201310-14 - Multiple vulnerabilities have been found in Groff, allowing context-dependent attackers to conduct symlink attacks. Versions less than 1.22.2 are affected.

tags | advisory, vulnerability

systems | linux, gentoo

advisories | CVE-2009-5044, CVE-2009-5078, CVE-2009-5079, CVE-2009-5080, CVE-2009-5081, CVE-2009-5082

SHA-256 | 4c8b8107de41173ce0db5640699699fd0f4ae5cfcb10a6a2cf1b52bf8d21c739

Download | Favorite | View

Mandriva Linux Security Advisory 2013-086

Posted Apr 10, 2013

Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2013-086 - contrib/pdfmark/pdfroff.sh in GNU troff before 1.21 allows local users to overwrite arbitrary files via a symlink attack on a pdf#####.tmp temporary file. The contrib/gdiffmk/tests/runtests.in scripts in GNU troff 1.21 and earlier allow local users to overwrite arbitrary files via a symlink attack on a gro#####.tmp or /tmp/##### temporary file. The contrib/eqn2graph/eqn2graph.sh, contrib/pic2graph/pic2graph.sh scripts in GNU troff 1.21 and earlier do not properly handle certain failed attempts to create temporary directories, which might allow local users to overwrite arbitrary files via a symlink attack on a file in a temporary directory, a different vulnerability than CVE-2004-1296. The contrib/groffer/perl/roff2.pl scripts in GNU troff 1.21 and earlier use an insufficient number of X characters in the template argument to the tempfile function, which makes it easier for local users to overwrite arbitrary files via a symlink attack on a temporary file, a different vulnerability than CVE-2004-0969. The updated packages have been patched to correct these issues.

tags | advisory, arbitrary, local, perl

systems | linux, mandriva

advisories | CVE-2009-5044, CVE-2009-5079, CVE-2009-5080, CVE-2009-5081

SHA-256 | 0de17ba22272b3a3d36b067a2beabe8eb38298c3d26a34deb5b497588491615c

Download | Favorite | View

Mandriva Linux Security Advisory 2013-085

Posted Apr 10, 2013

Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2013-085 - contrib/pdfmark/pdfroff.sh in GNU troff before 1.21 allows local users to overwrite arbitrary files via a symlink attack on a pdf#####.tmp temporary file. The contrib/gdiffmk/tests/runtests.in scripts in GNU troff 1.21 and earlier allow local users to overwrite arbitrary files via a symlink attack on a gro#####.tmp or /tmp/##### temporary file. The contrib/eqn2graph/eqn2graph.sh, contrib/pic2graph/pic2graph.sh scripts in GNU troff 1.21 and earlier do not properly handle certain failed attempts to create temporary directories, which might allow local users to overwrite arbitrary files via a symlink attack on a file in a temporary directory, a different vulnerability than CVE-2004-1296. The updated packages have been patched to correct these issues.

tags | advisory, arbitrary, local

systems | linux, mandriva

advisories | CVE-2009-5044, CVE-2009-5079, CVE-2009-5080

SHA-256 | 5c7df6f745f8b79b66fed6840c0d39eaf7b32f66e462ebf8ebd790d032ffcb4b

Download | Favorite | View