CVE-2009-5081
Last modified
CVE-2009-5081 is a vulnerability of currently unknown severity. The (1) config.guess, (2) contrib/groffer/perl/groffer.pl, and (3) contrib/groffer/perl/roff2.pl scripts in GNU troff (aka groff) 1.21 and earlier use an insufficient number of X characters in the template argument to the tempfile function, which makes it easier for local users to overwrite arbitrary files via a symlink attack on a temporary file, a different vulnerability than CVE-2004-0969.. EPSS estimates a 0.29% chance of exploitation in the next 30 days.
Description
The (1) config.guess, (2) contrib/groffer/perl/groffer.pl, and (3) contrib/groffer/perl/roff2.pl scripts in GNU troff (aka groff) 1.21 and earlier use an insufficient number of X characters in the template argument to the tempfile function, which makes it easier for local users to overwrite arbitrary files via a symlink attack on a temporary file, a different vulnerability than CVE-2004-0969.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Gnu | Groff | <= 1.21 |
| Gnu | Groff | 1.10 |
| Gnu | Groff | 1.11 |
| Gnu | Groff | 1.11a |
| Gnu | Groff | 1.14 |
| Gnu | Groff | 1.15 |
| Gnu | Groff | 1.16 |
| Gnu | Groff | 1.16.1 |
| Gnu | Groff | 1.17.1 |
| Gnu | Groff | 1.17.2 |
| Gnu | Groff | 1.18.1 |
| Gnu | Groff | 1.19 |
| Gnu | Groff | 1.19.1 |
| Gnu | Groff | 1.19.2 |
| Gnu | Groff | 1.20 |
| Gnu | Groff | 1.20.1 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2009-5081?
How severe is CVE-2009-5081?
How do I fix CVE-2009-5081?
Are you affected by CVE-2009-5081?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST