CVE-2009-5082

published 2011-06-30

CVE-2009-5082: The (1) configure and (2) config.guess scripts in GNU troff (aka groff) 1.20.1 on Openwall GNU/*/Linux (aka Owl) improperly create temporary files upon a…

low 3.3 CVSS 3.1

AV L AC M Au N C N I P A P

The (1) configure and (2) config.guess scripts in GNU troff (aka groff) 1.20.1 on Openwall GNU/*/Linux (aka Owl) improperly create temporary files upon a failure of the mktemp function, which makes it easier for local users to overwrite arbitrary files via a symlink attack on a temporary file.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
debian	groff	< groff 1.20.1-5 (bookworm)	groff 1.20.1-5 (bookworm)
gnu	groff	—	—
gnu	groff	>= 0 < 1.20.1-5	1.20.1-5
gnu	groff	>= 0 < 1.20.1-5	1.20.1-5
gnu	groff	>= 0 < 1.20.1-5	1.20.1-5
gnu	groff	>= 0 < 1.20.1-5	1.20.1-5

CVSS provenance

nvd 3.3 LOW AV:L/AC:M/Au:N/C:N/I:P/A:P

osv 3.3 LOW

CWE-59