The (1) gendef.sh, (2) doc/fixinfo.sh, and (3) contrib/gdiffmk/tests/runtests.in scripts in GNU troff (aka groff) 1.21 and earlier allow local users to overwrite arbitrary files via a symlink attack on a gro#####.tmp or /tmp/##### temporary file.
Metrics
Affected Vendors & Products
References
History
No history.

Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-07T07:24:54.081Z
Reserved: 2011-06-30T00:00:00
Link: CVE-2009-5079

No data.

Status : Deferred
Published: 2011-06-30T15:55:01.677
Modified: 2025-04-11T00:51:21.963
Link: CVE-2009-5079

No data.