Detections
Analytics
NewStart CGSL MAIN 5.04 : groff Multiple Vulnerabilities (NS-SA-2023-0067)
medium Nessus Plugin ID 187343
Synopsis
The remote NewStart CGSL host is affected by multiple vulnerabilities.Description
The remote NewStart CGSL host, running version MAIN 5.04, has groff packages installed that are affected by multiple vulnerabilities:- contrib/pdfmark/pdfroff.sh in GNU troff (aka groff) before 1.21 allows local users to overwrite arbitrary files via a symlink attack on a pdf#####.tmp temporary file. (CVE-2009-5044)
- The (1) contrib/eqn2graph/eqn2graph.sh, (2) contrib/grap2graph/grap2graph.sh, and (3) contrib/pic2graph/pic2graph.sh scripts in GNU troff (aka groff) 1.21 and earlier do not properly handle certain failed attempts to create temporary directories, which might allow local users to overwrite arbitrary files via a symlink attack on a file in a temporary directory, a different vulnerability than CVE-2004-1296. (CVE-2009-5080)
- The (1) config.guess, (2) contrib/groffer/perl/groffer.pl, and (3) contrib/groffer/perl/roff2.pl scripts in GNU troff (aka groff) 1.21 and earlier use an insufficient number of X characters in the template argument to the tempfile function, which makes it easier for local users to overwrite arbitrary files via a symlink attack on a temporary file, a different vulnerability than CVE-2004-0969. (CVE-2009-5081)
Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
Solution
Upgrade the vulnerable CGSL groff packages. Note that updated packages may not be available yet. Please contact ZTE for more information.See Also
https://security.gd-linux.com/notice/NS-SA-2023-0067
https://security.gd-linux.com/info/CVE-2009-5044
Plugin Details
Severity: Medium
ID: 187343
File Name: newstart_cgsl_NS-SA-2023-0067_groff.nasl
Version: 1.0
Type: local
Published: 12/27/2023
Updated: 12/27/2023
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 4.0
CVSS v2
Risk Factor: Low
Base Score: 3.3
Temporal Score: 2.4
Vector: CVSS2#AV:L/AC:M/Au:N/C:N/I:P/A:P
CVSS Score Source: CVE-2009-5081
CVSS v3
Risk Factor: Medium
Base Score: 5.5
Temporal Score: 4.8
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
CPE: cpe:/o:zte:cgsl_main:5, p-cpe:/a:zte:cgsl_main:groff, p-cpe:/a:zte:cgsl_main:groff-base, p-cpe:/a:zte:cgsl_main:groff-debuginfo, p-cpe:/a:zte:cgsl_main:groff-doc, p-cpe:/a:zte:cgsl_main:groff-perl, p-cpe:/a:zte:cgsl_main:groff-x11
Required KB Items: Host/local_checks_enabled, Host/cpu, Host/ZTE-CGSL/release, Host/ZTE-CGSL/rpm-list
Exploit Ease: No known exploits are available
Patch Publication Date: 5/26/2023
Vulnerability Publication Date: 7/24/2009