CVE-2009-5081
Published Jun 30, 2011
Last updated a year ago
Overview
- Description
- The (1) config.guess, (2) contrib/groffer/perl/groffer.pl, and (3) contrib/groffer/perl/roff2.pl scripts in GNU troff (aka groff) 1.21 and earlier use an insufficient number of X characters in the template argument to the tempfile function, which makes it easier for local users to overwrite arbitrary files via a symlink attack on a temporary file, a different vulnerability than CVE-2004-0969.
- Source
- cve@mitre.org
- NVD status
- Modified
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 3.3
- Impact score
- 4.9
- Exploitability score
- 3.4
- Vector string
- AV:L/AC:M/Au:N/C:N/I:P/A:P
Weaknesses
- nvd@nist.gov
- CWE-59
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:gnu:groff:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "66EE516B-88DB-47BC-AC1D-66B7C8E39AB1",
"versionEndIncluding": "1.21"
},
{
"criteria": "cpe:2.3:a:gnu:groff:1.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "35017C15-4CCD-4B44-9108-F5650319A009"
},
{
"criteria": "cpe:2.3:a:gnu:groff:1.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B8AC4613-F1BE-4EEE-84C3-A13D2AC048B8"
},
{
"criteria": "cpe:2.3:a:gnu:groff:1.11a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2D6BD17C-0DE9-405D-BC02-E996FBC4F97A"
},
{
"criteria": "cpe:2.3:a:gnu:groff:1.14:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5493392A-B8E1-4F71-A1ED-6889FD1CC217"
},
{
"criteria": "cpe:2.3:a:gnu:groff:1.15:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BDF86410-1841-4549-A0FE-3D16C6CCE383"
},
{
"criteria": "cpe:2.3:a:gnu:groff:1.16:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C91EE2C2-DE96-494D-BEEE-D07ED74EDEAC"
},
{
"criteria": "cpe:2.3:a:gnu:groff:1.16.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EDB1389A-0F7D-4616-8553-AF1E40B05256"
},
{
"criteria": "cpe:2.3:a:gnu:groff:1.17.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6D4A1AC6-2820-4992-B652-EF6FD308D643"
},
{
"criteria": "cpe:2.3:a:gnu:groff:1.17.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "59A32AD0-B019-4FAF-BC8A-01FE6F90628E"
},
{
"criteria": "cpe:2.3:a:gnu:groff:1.18.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A81CEA14-F694-431F-BAC9-BBB8CC09BBCB"
},
{
"criteria": "cpe:2.3:a:gnu:groff:1.19:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3C3A17D1-F3A9-45FC-A943-C47B8121599C"
},
{
"criteria": "cpe:2.3:a:gnu:groff:1.19.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0D64601D-0EA0-40AD-9E25-74360051CC2C"
},
{
"criteria": "cpe:2.3:a:gnu:groff:1.19.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1D944298-B544-4D38-96A3-5CA22C9C3C7B"
},
{
"criteria": "cpe:2.3:a:gnu:groff:1.20:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6F737E42-B8F1-4C9C-B3E9-382BCE43859D"
},
{
"criteria": "cpe:2.3:a:gnu:groff:1.20.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9ECE4B65-2CE6-44B6-B29E-97ECA0014C1D"
}
],
"operator": "OR"
}
]
}
]