Family: Ubuntu Local Security Checks --> Category: infos
USN43-1 : groff vulnerabilities Vulnerability Scan
Vulnerability Scan Summary
Detailed Explanation for this Vulnerability Test
These remote packages are missing security patches :
Javier Fernández-Sanguino Peña discovered that the auxiliary scripts
"eqn2graph" and "pic2graph" created temporary files in an insecure
way, which allowed exploitation of a race condition to create or
overwrite files with the rights of the user invoking the program.
Upgrade to :
- groff-126.96.36.199-1ubuntu0.2 (Ubuntu 4.10)
- groff-base-188.8.131.52-1ubuntu0.2 (Ubuntu 4.10)
Threat Level: High
Click HERE for more information and discussions on this network vulnerability scan.