CVE-2000-0803

Currently unrated

Key Information:

Vendor
Gnu
Status
Groff
Vendor
CVE Published:
19 December 2000

Summary

GNU Groff uses the current working directory to find a device description file, which allows a local user to gain additional privileges by including a malicious postpro directive in the description file, which is executed when another user runs groff.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/5280
vdb-entryx_refsource_XF

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.