Vulnerability in Gnu Groff

CVE-2009-5080

The (1) contrib/eqn2graph/eqn2graph.sh, (2) contrib/grap2graph/grap2graph.sh, and (3) contrib/pic2graph/pic2graph.sh scripts in GNU troff (aka groff) 1.21 and earlier do not properly handle certain failed attempts to create temporary directories, which might allow local users to overwrite arbitrary files via a symlink attack on a file in a temporary directory, a different vulnerability than CVE-2004-1296.

EPSS: 0.004 (28.3th percentile) — read the EPSS interpretation.

Affected products

  • Gnu Groff — versions 1.10, 1.11, 1.11a
  • N/a — versions n/a

Weakness classification (CWE)

Public proof-of-concept exploits

References

Frequently asked questions

What is CVE-2009-5080?
CVE-2009-5080 is a vulnerability in Gnu Groff, classified under Improper Link Resolution Before File Access. Published 2011-06-30.
Is CVE-2009-5080 known to be exploited?
1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.