CVEvulnerability
CVE-2004-0969
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2005-02-09
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:N/I:P/A:N
Description
The groffer script in the Groff package 1.18 and later versions, as used in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files.
Affected configurations
• gnu groff 1.19
• gentoo linux
• ubuntu ubuntu linux 4.1
References
- http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=136313 bugzilla.redhat.com
- http://secunia.com/advisories/18764 secunia.com
- http://www.gentoo.org/security/en/glsa/glsa-200411-15.xml Patch, Vendor Advisory
- http://www.securityfocus.com/bid/11287 Patch, Vendor Advisory
- http://www.trustix.org/errata/2004/0050 www.trustix.org
- http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:038 wwwnew.mandriva.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17583 exchange.xforce.ibmcloud.com
- http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=136313 bugzilla.redhat.com
- http://secunia.com/advisories/18764 secunia.com
- http://www.gentoo.org/security/en/glsa/glsa-200411-15.xml Patch, Vendor Advisory
- http://www.securityfocus.com/bid/11287 Patch, Vendor Advisory
- http://www.trustix.org/errata/2004/0050 www.trustix.org
- http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:038 wwwnew.mandriva.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17583 exchange.xforce.ibmcloud.com