Privilege Escalation Vulnerability in GNU Groff by The GNU Project

CVE-2000-0803

What is CVE-2000-0803?

GNU Groff contains a vulnerability that permits local users to elevate their privileges by manipulating the current working directory. By embedding a malicious postpro directive within a device description file, an attacker can execute harmful actions when another user invokes the groff command. This flaw emphasizes the necessity for rigid access controls and secure configurations to mitigate the risk associated with local user interactions.

References