Unscored severity · published Feb 9, 2005
CVE-2004-0969
The groffer script in the Groff package 1.18 and later versions, as used in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to…
–
CVSS
0.4%
EPSS
No
On KEV
Description
The groffer script in the Groff package 1.18 and later versions, as used in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 31% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GR
Groff · Gnu
1.19 · source: NVD
LI
Linux · Gentoo
All versions, or not specified · source: NVD
UL
Ubuntu Linux · Ubuntu
4.1; 4.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-0969
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-0969
bugzilla.redhat.com
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=136313
secunia.com
http://secunia.com/advisories/18764
Patch
http://www.gentoo.org/security/en/glsa/glsa-200411-15.xml
Patch
http://www.securityfocus.com/bid/11287
www.trustix.org
http://www.trustix.org/errata/2004/0050
wwwnew.mandriva.com
http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:038
More from Linux
9.8
CVE-2024-12084
Rsync: heap buffer overflow in rsync due to improper checksum length handling
7.5
CVE-2024-12087
Rsync: path traversal vulnerability in rsync
7.5
CVE-2024-12088
Rsync: --safe-links option bypass leads to path traversal
7.5
CVE-2024-12085
Rsync: info leak via uninitialized stack contents
6.8
CVE-2024-12086
A flaw was found in rsync