← Database

CVE-2009-5079

LOW CVSS: 3.3 Published: 2011-06-30 Modified: 2026-06-16

Description

The (1) gendef.sh, (2) doc/fixinfo.sh, and (3) contrib/gdiffmk/tests/runtests.in scripts in GNU troff (aka groff) 1.21 and earlier allow local users to overwrite arbitrary files via a symlink attack on a gro#####.tmp or /tmp/##### temporary file.

Affected Platforms

Gnu Groff

Weakness Type

CWE-59

References