PT-2004-1985

CVE-2004-0969

·

تاريخ النشر

2004-10-20

·

تاريخ التحديث

2017-07-11

الوصف من

CVSS 2.0
2.1
منخفضة
المقاييسAV:L/AC:L/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions: Groff package versions 1.18 and later
Description: The issue allows local users to overwrite files via a symlink attack on temporary files created by the groffer script. This is a problem in the Groff package, which is used in various operating systems, including Trustix Secure Linux versions 1.5 through 2.1.
Recommendations: For Groff package versions 1.18 and later, consider restricting access to the groffer script until a fix is available, or apply configuration changes to prevent the creation of temporary files that can be targeted by a symlink attack.
قابلية الاستغلال
إصلاح
الباحثون
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾