• info
• discussion
• exploit
• solution
• references

GNU Troff (Groff) Groffer Script Insecure Temporary File Creation Vulnerability

Solution:
Fixes from vendors are available. Please see the referenced advisories for more information.


Slackware Linux -current

• Slackware groff-1.19.1-i486-3.tgz
  ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/ap/g roff-1.19.1-i486-3.tgz

GNU groff 1.19

• Mandriva groff-1.19-6.1.101mdk.i586.rpm
  Mandriva Linux 10.1:
  http://www.mandriva.com/en/download


• Mandriva groff-1.19-6.1.101mdk.src.rpm
  Mandriva Linux 10.1:
  http://www.mandriva.com/en/download


• Mandriva groff-1.19-6.1.101mdk.x86_64.rpm
  Mandriva Linux 10.1:
  http://www.mandriva.com/en/download


• Mandriva groff-1.19-6.1.C30mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva groff-1.19-6.1.C30mdk.i586.rpm
  Corporate 3.0:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva groff-1.19-6.1.C30mdk.src.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva groff-1.19-6.1.C30mdk.x86_64.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva groff-1.19-6.1.C30mdk.x86_64.rpm
  Corporate 3.0:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva groff-1.19-9.1.102mdk.i586.rpm
  Mandriva Linux 10.2:
  http://www.mandriva.com/en/download


• Mandriva groff-1.19-9.1.102mdk.i586.rpm
  Mandriva Linux 10.2:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva groff-1.19-9.1.102mdk.src.rpm
  Mandriva Linux 10.2:
  http://www.mandriva.com/en/download


• Mandriva groff-1.19-9.1.102mdk.x86_64.rpm
  Mandriva Linux 10.2:
  http://www.mandriva.com/en/download


• Mandriva groff-for-man-1.19-6.1.101mdk.i586.rpm
  Mandriva Linux 10.1:
  http://www.mandriva.com/en/download


• Mandriva groff-for-man-1.19-6.1.101mdk.x86_64.rpm
  Mandriva Linux 10.1:
  http://www.mandriva.com/en/download


• Mandriva groff-for-man-1.19-6.1.C30mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva groff-for-man-1.19-6.1.C30mdk.i586.rpm
  Corporate 3.0:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva groff-for-man-1.19-6.1.C30mdk.x86_64.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva groff-for-man-1.19-6.1.C30mdk.x86_64.rpm
  Corporate 3.0:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva groff-for-man-1.19-9.1.102mdk.i586.rpm
  Mandriva Linux 10.2:
  http://www.mandriva.com/en/download


• Mandriva groff-for-man-1.19-9.1.102mdk.x86_64.rpm
  Mandriva Linux 10.2:
  http://www.mandriva.com/en/download


• Mandriva groff-gxditview-1.19-6.1.101mdk.i586.rpm
  Mandriva Linux 10.1:
  http://www.mandriva.com/en/download


• Mandriva groff-gxditview-1.19-6.1.101mdk.x86_64.rpm
  Mandriva Linux 10.1:
  http://www.mandriva.com/en/download


• Mandriva groff-gxditview-1.19-6.1.C30mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva groff-gxditview-1.19-6.1.C30mdk.i586.rpm
  Corporate 3.0:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva groff-gxditview-1.19-6.1.C30mdk.x86_64.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva groff-gxditview-1.19-6.1.C30mdk.x86_64.rpm
  Corporate 3.0:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva groff-gxditview-1.19-9.1.102mdk.i586.rpm
  Mandriva Linux 10.2:
  http://www.mandriva.com/en/download


• Mandriva groff-gxditview-1.19-9.1.102mdk.x86_64.rpm
  Mandriva Linux 10.2:
  http://www.mandriva.com/en/download


• Mandriva groff-perl-1.19-6.1.101mdk.i586.rpm
  Mandriva Linux 10.1:
  http://www.mandriva.com/en/download


• Mandriva groff-perl-1.19-6.1.101mdk.x86_64.rpm
  Mandriva Linux 10.1:
  http://www.mandriva.com/en/download


• Mandriva groff-perl-1.19-6.1.C30mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva groff-perl-1.19-6.1.C30mdk.i586.rpm
  Corporate 3.0:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva groff-perl-1.19-6.1.C30mdk.x86_64.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva groff-perl-1.19-6.1.C30mdk.x86_64.rpm
  Corporate 3.0:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva groff-perl-1.19-9.1.102mdk.i586.rpm
  Mandriva Linux 10.2:
  http://www.mandriva.com/en/download


• Mandriva groff-perl-1.19-9.1.102mdk.x86_64.rpm
  Mandriva Linux 10.2:
  http://www.mandriva.com/en/download


• Trustix groff-1.19-4tr.i586.rpm
  Trustix Secure Linux 2.1 & Enterprise Server 2
  ftp://ftp.trustix.org/pub/trustix/updates/


• Trustix groff-perl-1.19-4tr.i586.rpm
  Trustix Secure Linux 2.1 & Enterprise Server 2
  ftp://ftp.trustix.org/pub/trustix/updates/

GNU groff 1.19.1

• Mandriva groff-1.19-6.1.C30mdk.i586.rpm
  Corporate 3.0:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva groff-1.19.1-1.1.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://www.mandriva.com/en/download


• Mandriva groff-1.19.1-1.1.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva groff-1.19.1-1.1.20060mdk.src.rpm
  Mandriva Linux 2006.0:
  http://www.mandriva.com/en/download


• Mandriva groff-1.19.1-1.1.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0:
  http://www.mandriva.com/en/download


• Mandriva groff-1.19.1-1.1.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva groff-for-man-1.19.1-1.1.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://www.mandriva.com/en/download


• Mandriva groff-for-man-1.19.1-1.1.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva groff-for-man-1.19.1-1.1.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0:
  http://www.mandriva.com/en/download


• Mandriva groff-for-man-1.19.1-1.1.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva groff-gxditview-1.19.1-1.1.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://www.mandriva.com/en/download


• Mandriva groff-gxditview-1.19.1-1.1.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva groff-gxditview-1.19.1-1.1.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0:
  http://www.mandriva.com/en/download


• Mandriva groff-gxditview-1.19.1-1.1.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva groff-perl-1.19.1-1.1.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://www.mandriva.com/en/download


• Mandriva groff-perl-1.19.1-1.1.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva groff-perl-1.19.1-1.1.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0:
  http://www.mandriva.com/en/download


• Mandriva groff-perl-1.19.1-1.1.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0:
  http://wwwnew.mandriva.com/en/downloads/