A vulnerability has been reported in GNU Troff, which can be exploited by malicious, local users to perform certain actions on a vulnerable system with escalated privileges.

The vulnerability is caused due to the "groffer.sh" script creating temporary files insecurely. This can be exploited via symlink attacks to create or overwrite arbitrary files with the privileges of the user executing the vulnerable script.

The vulnerability has been reported in versions 1.19 and 1.19.1. Other versions may also be affected.

Solution
Update to version 1.19.2.
Further details available to Secunia VIM customers

Provided and/or discovered by
First reported in a Trustix advisory.

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://www.trustix.org/errata/2004/0050/

Deep Links
Links available to Secunia VIM customers