← Database

CVE-2009-5082

LOW CVSS: 3.3 Published: 2011-06-30 Modified: 2026-06-16

Description

The (1) configure and (2) config.guess scripts in GNU troff (aka groff) 1.20.1 on Openwall GNU/*/Linux (aka Owl) improperly create temporary files upon a failure of the mktemp function, which makes it easier for local users to overwrite arbitrary files via a symlink attack on a temporary file.

Affected Platforms

Gnu GroffOpenwall Owl

Weakness Type

CWE-59

References