CVE-2009-5082
Publication date 30 June 2011
Last updated 24 July 2024
Ubuntu priority
Description
The (1) configure and (2) config.guess scripts in GNU troff (aka groff) 1.20.1 on Openwall GNU/*/Linux (aka Owl) improperly create temporary files upon a failure of the mktemp function, which makes it easier for local users to overwrite arbitrary files via a symlink attack on a temporary file.
Notes
jdstrand
only exploitable during the build Debian CVE tracker lists this as fixed in 1.20.1-5, but it is not