CVE

Id
9397  
CVE No.
CVE-2004-0969  
Status
Candidate  
Description
The groffer script in the Groff package 1.18 and later versions, as used in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files.  
Phase
Assigned (20041019)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
62760 9397 CVE-2004-0969 GENTOO:GLSA-200411-15  View
62761 9397 CVE-2004-0969 URL:http://www.gentoo.org/security/en/glsa/glsa-200411-15.xml  View
62762 9397 CVE-2004-0969 MANDRIVA:MDKSA-2006:038  View
62763 9397 CVE-2004-0969 URL:http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:038  View
62764 9397 CVE-2004-0969 TRUSTIX:2004-0050  View
62765 9397 CVE-2004-0969 URL:http://www.trustix.org/errata/2004/0050  View
62766 9397 CVE-2004-0969 CONFIRM:http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=136313  View
62767 9397 CVE-2004-0969 BID:11287  View
62768 9397 CVE-2004-0969 URL:http://www.securityfocus.com/bid/11287  View
62769 9397 CVE-2004-0969 SECUNIA:18764  View
62770 9397 CVE-2004-0969 URL:http://secunia.com/advisories/18764  View
62771 9397 CVE-2004-0969 XF:script-temporary-file-overwrite(17583)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63070 JVNDB-2004-000412 GNU gzip の複数のスクリプトにおけるシンボリックリンク攻撃を受ける脆弱性 GNU gzip に含まれる (1) gzexe (2) zdiff (3) znew スクリプトには、セキュリティ上不適切な方法で一時ファイルが作成されてしまう不備が存在するため、シンボリックリンク攻撃を受ける脆弱性が存在します。 CVE-2004-0970 9397 2.1 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000412.html  View