CVE-2009-5044

Related Files

Apple Security Advisory 2015-08-13-2

Posted Aug 13, 2015

Authored by Apple | Site apple.com

Apple Security Advisory 2015-08-13-2 - OS X Yosemite 10.10.5 and Security Update 2015-006 is now available and addresses vulnerabilities in Apache, the OD plug-in, IOBluetoothHCIController, and more.

tags | advisory, vulnerability

systems | apple, osx

advisories | CVE-2009-5044, CVE-2009-5078, CVE-2012-6685, CVE-2013-1775, CVE-2013-1776, CVE-2013-2776, CVE-2013-2777, CVE-2013-7040, CVE-2013-7338, CVE-2013-7422, CVE-2014-0067, CVE-2014-0106, CVE-2014-0191, CVE-2014-1912, CVE-2014-3581, CVE-2014-3583, CVE-2014-3613, CVE-2014-3620, CVE-2014-3660, CVE-2014-3707, CVE-2014-7185, CVE-2014-7844, CVE-2014-8109, CVE-2014-8150, CVE-2014-8151, CVE-2014-8161, CVE-2014-8767, CVE-2014-8769

SHA-256 | 1ccd5f307af57152abb6e4f0da773ca4420fb7a6e98f26301366a9071ecc9a33

Download | Favorite | View

Gentoo Linux Security Advisory 201310-14

Posted Oct 25, 2013

Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory 201310-14 - Multiple vulnerabilities have been found in Groff, allowing context-dependent attackers to conduct symlink attacks. Versions less than 1.22.2 are affected.

tags | advisory, vulnerability

systems | linux, gentoo

advisories | CVE-2009-5044, CVE-2009-5078, CVE-2009-5079, CVE-2009-5080, CVE-2009-5081, CVE-2009-5082

SHA-256 | 4c8b8107de41173ce0db5640699699fd0f4ae5cfcb10a6a2cf1b52bf8d21c739

Download | Favorite | View

Mandriva Linux Security Advisory 2013-086

Posted Apr 10, 2013

Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2013-086 - contrib/pdfmark/pdfroff.sh in GNU troff before 1.21 allows local users to overwrite arbitrary files via a symlink attack on a pdf#####.tmp temporary file. The contrib/gdiffmk/tests/runtests.in scripts in GNU troff 1.21 and earlier allow local users to overwrite arbitrary files via a symlink attack on a gro#####.tmp or /tmp/##### temporary file. The contrib/eqn2graph/eqn2graph.sh, contrib/pic2graph/pic2graph.sh scripts in GNU troff 1.21 and earlier do not properly handle certain failed attempts to create temporary directories, which might allow local users to overwrite arbitrary files via a symlink attack on a file in a temporary directory, a different vulnerability than CVE-2004-1296. The contrib/groffer/perl/roff2.pl scripts in GNU troff 1.21 and earlier use an insufficient number of X characters in the template argument to the tempfile function, which makes it easier for local users to overwrite arbitrary files via a symlink attack on a temporary file, a different vulnerability than CVE-2004-0969. The updated packages have been patched to correct these issues.

tags | advisory, arbitrary, local, perl

systems | linux, mandriva

advisories | CVE-2009-5044, CVE-2009-5079, CVE-2009-5080, CVE-2009-5081

SHA-256 | 0de17ba22272b3a3d36b067a2beabe8eb38298c3d26a34deb5b497588491615c

Download | Favorite | View

Mandriva Linux Security Advisory 2013-085

Posted Apr 10, 2013

Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2013-085 - contrib/pdfmark/pdfroff.sh in GNU troff before 1.21 allows local users to overwrite arbitrary files via a symlink attack on a pdf#####.tmp temporary file. The contrib/gdiffmk/tests/runtests.in scripts in GNU troff 1.21 and earlier allow local users to overwrite arbitrary files via a symlink attack on a gro#####.tmp or /tmp/##### temporary file. The contrib/eqn2graph/eqn2graph.sh, contrib/pic2graph/pic2graph.sh scripts in GNU troff 1.21 and earlier do not properly handle certain failed attempts to create temporary directories, which might allow local users to overwrite arbitrary files via a symlink attack on a file in a temporary directory, a different vulnerability than CVE-2004-1296. The updated packages have been patched to correct these issues.

tags | advisory, arbitrary, local

systems | linux, mandriva

advisories | CVE-2009-5044, CVE-2009-5079, CVE-2009-5080

SHA-256 | 5c7df6f745f8b79b66fed6840c0d39eaf7b32f66e462ebf8ebd790d032ffcb4b

Download | Favorite | View