cbcvebase.
CVE-2004-0969
published 2005-02-09

CVE-2004-0969: The groffer script in the Groff package 1.18 and later versions, as used in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows…

low2.1CVSS 3.1
AVLACLAuNCNIPAN
The groffer script in the Groff package 1.18 and later versions, as used in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files.

Affected

27 ranges· showing 25
VendorProductVersion rangeFixed in
debiangroff< groff 1.20.1-5 (bookworm)groff 1.20.1-5 (bookworm)
debiangroff< groff 1.18.1.1-2 (bookworm)groff 1.18.1.1-2 (bookworm)
gnugroff<= 1.21
gnugroff
gnugroff
gnugroff
gnugroff
gnugroff
gnugroff
gnugroff
gnugroff
gnugroff
gnugroff
gnugroff
gnugroff
gnugroff
gnugroff
gnugroff
gnugroff>= 0 < 1.20.1-51.20.1-5
gnugroff>= 0 < 1.18.1.1-21.18.1.1-2
gnugroff>= 0 < 1.20.1-51.20.1-5
gnugroff>= 0 < 1.18.1.1-21.18.1.1-2
gnugroff>= 0 < 1.20.1-51.20.1-5
gnugroff>= 0 < 1.18.1.1-21.18.1.1-2
gnugroff>= 0 < 1.20.1-51.20.1-5

CVSS provenance

nvd3.3LOWAV:L/AC:M/Au:N/C:N/I:P/A:P
osv2.1LOW