exploits , vulnerabilities , articles , GNU Troff pdfroff Insecure Temporary File Creation and Arbitrary File Access Vulnerabilities

Title	GNU Troff pdfroff Insecure Temporary File Creation and Arbitrary File Access Vulnerabilities
Published	2009-07-24-12:00AM
Updated	2009-09-15-12:31AM
Class	Design Error
CVE
Remote	No
Local	Yes
Credit	Brian M. Carlson
Vulnerable	GNU groff 1.19.1 GNU groff 1.19 GNU groff 1.18 GNU groff 1.17.2 GNU groff 1.17 Caldera OpenLinux Server 3.1.1 Caldera OpenLinux Server 3.1 Caldera OpenLinux Workstation 3.1.1 Caldera OpenLinux Workstation 3.1 HP Secure OS software for Linux 1.0 MandrakeSoft Linux Mandrake 8.1 ia64 MandrakeSoft Linux Mandrake 8.1 RedHat Linux 7.2 ia64 RedHat Linux 7.2 i386 RedHat Linux 7.1 ia64 RedHat Linux 7.1 i386 RedHat Linux 7.1 alpha GNU groff 1.16 MandrakeSoft Linux Mandrake 8.0 ppc MandrakeSoft Linux Mandrake 8.0 ppc MandrakeSoft Linux Mandrake 8.0 MandrakeSoft Linux Mandrake 8.0 MandrakeSoft Linux Mandrake 7.2 MandrakeSoft Linux Mandrake 7.2 MandrakeSoft Single Network Firewall 7.2 MandrakeSoft Single Network Firewall 7.2 RedHat Linux 7.2 ia64 RedHat Linux 7.2 i386 RedHat Linux 7.2 i386 RedHat Linux 7.2 RedHat Linux 7.2 RedHat Linux 7.1 ia64 RedHat Linux 7.1 ia64 RedHat Linux 7.1 i386 RedHat Linux 7.1 i386 RedHat Linux 7.1 alpha RedHat Linux 7.1 alpha RedHat Linux 7.1 RedHat Linux 7.1 RedHat Linux 7.0 i386 RedHat Linux 7.0 i386 RedHat Linux 7.0 alpha RedHat Linux 7.0 alpha RedHat Linux 7.0 RedHat Linux 7.0 GNU groff 1.15 Debian Linux 2.2 sparc Debian Linux 2.2 sparc Debian Linux 2.2 powerpc Debian Linux 2.2 powerpc Debian Linux 2.2 arm Debian Linux 2.2 arm Debian Linux 2.2 alpha Debian Linux 2.2 alpha Debian Linux 2.2 68k Debian Linux 2.2 Debian Linux 2.2 GNU groff 1.14 GNU groff 1.11 a RedHat Linux 5.2 i386 GNU groff 1.11 GNU groff 1.10
Not Vulnerable
Code	An attacker uses readily available commands to launch attacks.
TXT

Vulnerabilities - newest 10 RSS | More

2009-12-17 HP OpenView Storage Data Protector Multiple Remote Code Execution Vulnerabilities
2009-12-17 iDevSpot iSupport Multiple Cross Site Scripting Vulnerabilities
2009-12-17 GNU Automake Insecure Directory Permissions Vulnerability
2009-12-17 Mozilla Firefox CVE-2009-3979 Multiple Remote Memory Corruption Vulnerabilities
2009-12-17 Mozilla Firefox CVE-2009-3981 Remote Memory Corruption Vulnerability
2009-12-17 Drupal Sections Module HTML Injection Vulnerability
2009-12-17 Mozilla Firefox and SeaMonkey Theora Video Library Remote Integer Overflow Vulnerability
2009-12-17 Mozilla Firefox and Sea Monkey Insecure Protocol Location Bar Spoofing Vulnerability
2009-12-17 Mozilla Firefox and Sea Monkey Content Injection Spoofing Vulnerability
2009-12-17 Mozilla Firefox/SeaMonkey GeckoActiveXObject Exception Message COM Object Enumeration Vulnerability