Detections
Analytics
Mandriva Linux Security Advisory : groff (MDVSA-2013:086)
low Nessus Plugin ID 66099
Language:
Synopsis
The remote Mandriva Linux host is missing one or more security updates.Description
Multiple vulnerabilities has been found and corrected in groff :contrib/pdfmark/pdfroff.sh in GNU troff (aka groff) before 1.21 allows local users to overwrite arbitrary files via a symlink attack on a pdf#####.tmp temporary file (CVE-2009-5044).
The (1) gendef.sh, (2) doc/fixinfo.sh, and (3) contrib/gdiffmk/tests/runtests.in scripts in GNU troff (aka groff) 1.21 and earlier allow local users to overwrite arbitrary files via a symlink attack on a gro#####.tmp or /tmp/##### temporary file (CVE-2009-5079).
The (1) contrib/eqn2graph/eqn2graph.sh, (2) contrib/grap2graph/grap2graph.sh, and (3) contrib/pic2graph/pic2graph.sh scripts in GNU troff (aka groff) 1.21 and earlier do not properly handle certain failed attempts to create temporary directories, which might allow local users to overwrite arbitrary files via a symlink attack on a file in a temporary directory, a different vulnerability than CVE-2004-1296 (CVE-2009-5080).
The (1) config.guess, (2) contrib/groffer/perl/groffer.pl, and (3) contrib/groffer/perl/roff2.pl scripts in GNU troff (aka groff) 1.21 and earlier use an insufficient number of X characters in the template argument to the tempfile function, which makes it easier for local users to overwrite arbitrary files via a symlink attack on a temporary file, a different vulnerability than CVE-2004-0969 (CVE-2009-5081).
The updated packages have been patched to correct these issues.
Solution
Update the affected packages.Plugin Details
Severity: Low
ID: 66099
File Name: mandriva_MDVSA-2013-086.nasl
Version: 1.9
Type: local
Family: Mandriva Local Security Checks
Published: 4/20/2013
Updated: 1/6/2021
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 4.0
CVSS v2
Risk Factor: Low
Base Score: 3.3
Temporal Score: 2.4
Vector: CVSS2#AV:L/AC:M/Au:N/C:N/I:P/A:P
Vulnerability Information
CPE: p-cpe:/a:mandriva:linux:groff, p-cpe:/a:mandriva:linux:groff-doc, p-cpe:/a:mandriva:linux:groff-for-man, p-cpe:/a:mandriva:linux:groff-perl, p-cpe:/a:mandriva:linux:groff-x11, cpe:/o:mandriva:business_server:1
Required KB Items: Host/local_checks_enabled, Host/cpu, Host/Mandrake/release, Host/Mandrake/rpm-list
Exploit Ease: No known exploits are available
Patch Publication Date: 4/9/2013
Reference Information
CVE: CVE-2009-5044, CVE-2009-5079, CVE-2009-5080, CVE-2009-5081
MDVSA: 2013:086