CVE-2004-0969
First published: Wed Oct 20 2004(Updated: )
The groffer script in the Groff package 1.18 and later versions, as used in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| groff (GNU troff) | =1.19 | |
| Ubuntu | =4.1 | |
| Ubuntu | =4.1 | |
| Gentoo Linux |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/bid/11287
- http://www.gentoo.org/security/en/glsa/glsa-200411-15.xml
- http://www.trustix.org/errata/2004/0050
- http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=136313
- http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:038
- http://secunia.com/advisories/18764
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17583
Frequently Asked Questions
What is the severity of CVE-2004-0969?
CVE-2004-0969 is classified as a moderate severity vulnerability due to its potential for local privilege escalation.
How do I fix CVE-2004-0969?
To fix CVE-2004-0969, update the Groff package to a patched version that mitigates the symlink attack.
Who is affected by CVE-2004-0969?
CVE-2004-0969 affects local users on systems running Groff version 1.18 and later, including various Linux distributions.
What is the impact of CVE-2004-0969?
The impact of CVE-2004-0969 allows local users to overwrite files, potentially leading to data loss or system compromise.
Is CVE-2004-0969 common in older systems?
Yes, CVE-2004-0969 is more common in older systems and configurations using vulnerable versions of Groff.
- agent/type
- agent/remedy
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/references
- agent/author
- agent/weakness
- agent/first-publish-date
- agent/event
- agent/description
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-historical
- vendor/gnu
- product/groff
- canonical/gnu groff
- vendor/ubuntu
- product/ubuntu linux
- canonical/ubuntu ubuntu linux
- vendor/gentoo
- product/linux
- canonical/gentoo linux
- agent/software-canonical-lookup-request
- collector/nvd-index
- canonical/groff (gnu troff)
- version/groff (gnu troff)/1.19
- canonical/ubuntu
- version/ubuntu/4.1