CVE

Id
42517  
CVE No.
CVE-2009-5082  
Status
Candidate  
Description
The (1) configure and (2) config.guess scripts in GNU troff (aka groff) 1.20.1 on Openwall GNU/*/Linux (aka Owl) improperly create temporary files upon a failure of the mktemp function, which makes it easier for local users to overwrite arbitrary files via a symlink attack on a temporary file.  
Phase
Assigned (20110630)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
463128 42517 CVE-2009-5082 MLIST:[oss-security] 20090814 Re: CVE id request: groff (pdfroff)  View
463129 42517 CVE-2009-5082 URL:http://openwall.com/lists/oss-security/2009/08/14/4  View
463130 42517 CVE-2009-5082 MLIST:[oss-security] 20090814 Re: CVE id request: groff (pdfroff)  View
463131 42517 CVE-2009-5082 URL:http://openwall.com/lists/oss-security/2009/08/14/5  View
463132 42517 CVE-2009-5082 CONFIRM:http://cvsweb.openwall.com/cgi/cvsweb.cgi/Owl/packages/groff/groff-1.20.1-owl-tmp.diff  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
30723 JVNDB-2011-000071 Juniper Networks IDP ACM におけるクロスサイトスクリプティングの脆弱性 Juniper Networks の提供する IDP ACM (Application Configuration Manager) には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2009-5086 42517 4.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000071.html  View