exploits , vulnerabilities , articles , GNU Troff pdfroff Insecure Temporary File Creation and Arbitrary File Access Vulnerabilities

Title	GNU Troff pdfroff Insecure Temporary File Creation and Arbitrary File Access Vulnerabilities
Published	2009-07-24-12:00AM
Updated	2009-09-15-12:31AM
Class	Design Error
CVE
Remote	No
Local	Yes
Credit	Brian M. Carlson
Vulnerable	GNU groff 1.19.1 GNU groff 1.19 GNU groff 1.18 GNU groff 1.17.2 GNU groff 1.17 Caldera OpenLinux Server 3.1.1 Caldera OpenLinux Server 3.1 Caldera OpenLinux Workstation 3.1.1 Caldera OpenLinux Workstation 3.1 HP Secure OS software for Linux 1.0 MandrakeSoft Linux Mandrake 8.1 ia64 MandrakeSoft Linux Mandrake 8.1 RedHat Linux 7.2 ia64 RedHat Linux 7.2 i386 RedHat Linux 7.1 ia64 RedHat Linux 7.1 i386 RedHat Linux 7.1 alpha GNU groff 1.16 MandrakeSoft Linux Mandrake 8.0 ppc MandrakeSoft Linux Mandrake 8.0 ppc MandrakeSoft Linux Mandrake 8.0 MandrakeSoft Linux Mandrake 8.0 MandrakeSoft Linux Mandrake 7.2 MandrakeSoft Linux Mandrake 7.2 MandrakeSoft Single Network Firewall 7.2 MandrakeSoft Single Network Firewall 7.2 RedHat Linux 7.2 ia64 RedHat Linux 7.2 i386 RedHat Linux 7.2 i386 RedHat Linux 7.2 RedHat Linux 7.2 RedHat Linux 7.1 ia64 RedHat Linux 7.1 ia64 RedHat Linux 7.1 i386 RedHat Linux 7.1 i386 RedHat Linux 7.1 alpha RedHat Linux 7.1 alpha RedHat Linux 7.1 RedHat Linux 7.1 RedHat Linux 7.0 i386 RedHat Linux 7.0 i386 RedHat Linux 7.0 alpha RedHat Linux 7.0 alpha RedHat Linux 7.0 RedHat Linux 7.0 GNU groff 1.15 Debian Linux 2.2 sparc Debian Linux 2.2 sparc Debian Linux 2.2 powerpc Debian Linux 2.2 powerpc Debian Linux 2.2 arm Debian Linux 2.2 arm Debian Linux 2.2 alpha Debian Linux 2.2 alpha Debian Linux 2.2 68k Debian Linux 2.2 Debian Linux 2.2 GNU groff 1.14 GNU groff 1.11 a RedHat Linux 5.2 i386 GNU groff 1.11 GNU groff 1.10
Not Vulnerable
Code	An attacker uses readily available commands to launch attacks.
TXT

Vulnerabilities - newest 10 RSS | More

2009-12-16 IBM WebSphere Application Server JNDI Remote Information Disclosure Vulnerability
2009-12-16 Horde Application Framework Administration Interface Cross-Site Scripting Vulnerability
2009-12-16 Mozilla Firefox and SeaMonkey MFSA 2009-65 through -71 Multiple Vulnerabilities
2009-12-16 Merkaartor Insecure Temporary File Creation Vulnerability
2009-12-15 TYPO3 Watchdog (aba_watchdog) Unspecified Information Disclosure Vulnerability
2009-12-15 PostgreSQL Index Function Session State Modification Local Privilege Escalation Vulnerability
2009-12-15 PostgreSQL NULL Character CA SSL Certificate Validation Security Bypass Vulnerability
2009-12-15 IBM DB2 prior to 9.5 Fix Pack 5 Multiple Unspecified Security Vulnerabilities
2009-12-15 Sun Ray Server Software Desktop Session Handling Local Security Bypass Vulnerability
2009-12-15 Mozilla Firefox Sage Extension RSS Feeds Cross Domain Scripting Vulnerability