GNU Troff CVE-2009-5081 Insecure Temporary File Creation Vulnerabilities
BID:53940
Info
GNU Troff CVE-2009-5081 Insecure Temporary File Creation Vulnerabilities
| Bugtraq ID: | 53940 |
| Class: | Design Error |
| CVE: |
CVE-2009-5081 |
| Remote: | No |
| Local: | Yes |
| Published: | Aug 14 2009 12:00AM |
| Updated: | May 07 2015 05:05PM |
| Credit: | The vendor reported these issues. |
| Vulnerable: |
Mandriva Business Server 1 X86 64 Mandriva Business Server 1 GNU groff 1.19.1 GNU groff 1.19 GNU groff 1.18 GNU groff 1.17.2 GNU groff 1.17 GNU groff 1.16 GNU groff 1.15 GNU groff 1.14 GNU groff 1.11 a GNU groff 1.11 GNU groff 1.10 GNU groff 1.21 GNU groff 1.20 Gentoo Linux |
| Not Vulnerable: | |
Discussion
GNU Troff CVE-2009-5081 Insecure Temporary File Creation Vulnerabilities
GNU Troff (groff) creates temporary files in an insecure manner and allows unauthorized users to modify or delete files.
Successful exploits may allow attackers to mount a symlink attack, which may allow the attacker to delete or corrupt sensitive files. Attackers can also rename arbitrary files and potentially cause a denial-of-service condition. Other attacks are also possible.
GNU Troff (groff) creates temporary files in an insecure manner and allows unauthorized users to modify or delete files.
Successful exploits may allow attackers to mount a symlink attack, which may allow the attacker to delete or corrupt sensitive files. Attackers can also rename arbitrary files and potentially cause a denial-of-service condition. Other attacks are also possible.
Exploit / POC
GNU Troff CVE-2009-5081 Insecure Temporary File Creation Vulnerabilities
An attacker can use readily available commands to launch attacks.
An attacker can use readily available commands to launch attacks.
Solution / Fix
GNU Troff CVE-2009-5081 Insecure Temporary File Creation Vulnerabilities
Solution:
Updates are available. Please see the references for details.
Mandriva Business Server 1 X86 64
Solution:
Updates are available. Please see the references for details.
Mandriva Business Server 1 X86 64
-
Mandriva groff-1.21-3.2.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva groff-doc-1.21-3.2.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva groff-for-man-1.21-3.2.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva groff-perl-1.21-3.2.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva groff-x11-1.21-3.2.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/
References
GNU Troff CVE-2009-5081 Insecure Temporary File Creation Vulnerabilities
References:
References: