Unscored severity · published Jul 26, 2001
CVE-2001-1022
Format string vulnerability in pic utility in groff 1.16.1 and other versions, and jgroff before 1.15, allows remote attackers to bypass the -S option and execute arbitrary…
–
CVSS
11.4%
EPSS
No
On KEV
Description
Format string vulnerability in pic utility in groff 1.16.1 and other versions, and jgroff before 1.15, allows remote attackers to bypass the -S option and execute arbitrary commands via format string specifiers in the plot command.
Exploitation
Is it being used?
Exploit prediction (EPSS)11.4% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GR
Groff · Gnu
1.10; 1.11; 1.11a; 1.14; 1.15; 1.16.1 · source: NVD
JG
Jgroff · Jgroff
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2001-1022
CVE.org
https://www.cve.org/CVERecord?id=CVE-2001-1022
distro.conectiva.com.br
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000428
Patch
http://www.debian.org/security/2001/dsa-072
www.debian.org
http://www.debian.org/security/2002/dsa-107
www.osvdb.org
http://www.osvdb.org/1914
www.redhat.com
http://www.redhat.com/support/errata/RHSA-2002-004.html
Patch
http://www.securityfocus.com/archive/1/199706
More from Groff
6.5
CVE-2009-5078
contrib/pdfmark/pdfroff.sh in GNU troff (aka groff) before 1.21 launches the Ghostscript program without the -dSAFER option, which allows remote attackers to create, overwrite,…
–
CVE-2009-5082
The (1) configure and (2) config.guess scripts in GNU troff (aka groff) 1.20.1 on Openwall GNU/*/Linux (aka Owl) improperly create temporary files upon a failure of the mktemp…
–
CVE-2009-5081
The (1) config.guess, (2) contrib/groffer/perl/groffer.pl, and (3) contrib/groffer/perl/roff2.pl scripts in GNU troff (aka groff) 1.21 and earlier use an insufficient number of X…
–
CVE-2009-5080
The (1) contrib/eqn2graph/eqn2graph.sh, (2) contrib/grap2graph/grap2graph.sh, and (3) contrib/pic2graph/pic2graph.sh scripts in GNU troff (aka groff) 1.21 and earlier do not…
–
CVE-2009-5079
The (1) gendef.sh, (2) doc/fixinfo.sh, and (3) contrib/gdiffmk/tests/runtests.in scripts in GNU troff (aka groff) 1.21 and earlier allow local users to overwrite arbitrary files…