CVE-2009-5080
The (1) contrib/eqn2graph/eqn2graph.sh, (2) contrib/grap2graph/grap2graph.sh, and (3) contrib...
CVE-2009-5080 is a low vulnerability (CVSS 3.3) in Gnu Groff, published June 30, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.36%, the 29th percentile. Fixed in groff 1.20.1-5.
The (1) contrib/eqn2graph/eqn2graph.sh, (2) contrib/grap2graph/grap2graph.sh, and (3) contrib/pic2graph/pic2graph.sh scripts in GNU troff (aka groff) 1.21 and earlier do not properly handle certain failed attempts to create temporary directories, which might allow local users to overwrite arbitrary files via a symlink attack on a file in a temporary directory, a different vulnerability than CVE-2004-1296.
Exploit likelihood
What each source reports
NVD Score used
The (1) contrib/eqn2graph/eqn2graph.sh, (2) contrib/grap2graph/grap2graph.sh, and (3) contrib/pic2graph/pic2graph.sh scripts in GNU troff (aka groff) 1.21 and earlier do not properly handle certain failed attempts to create temporary directories, which might allow local users to overwrite arbitrary files via a symlink attack on a file in a temporary directory, a different vulnerability than CVE-2004-1296.
- Record
CVE-2009-5080- CVSS 2.0
- 3.3 Low
AV:L/AC:M/Au:N/C:N/I:P/A:P - Weakness
- CWE-59
- Updated
- 2026-11-02
CVE List No score
The (1) contrib/eqn2graph/eqn2graph.sh, (2) contrib/grap2graph/grap2graph.sh, and (3) contrib/pic2graph/pic2graph.sh scripts in GNU troff (aka groff) 1.21 and earlier do not properly handle certain failed attempts to create temporary directories, which might allow local users to overwrite arbitrary files via a symlink attack on a file in a temporary directory, a different vulnerability than CVE-2004-1296.
- Record
CVE-2009-5080- Updated
- 2026-11-02
EUVDEUVD-2009-5035 No score
The (1) contrib/eqn2graph/eqn2graph.sh, (2) contrib/grap2graph/grap2graph.sh, and (3) contrib/pic2graph/pic2graph.sh scripts in GNU troff (aka groff) 1.21 and earlier do not properly handle certain failed attempts to create temporary directories, which might allow local users to overwrite arbitrary files via a symlink attack on a file in a temporary directory, a different vulnerability than CVE-2004-1296.
- Record
EUVD-2009-5035- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wgpq-q6f4-j3jq No score
The (1) contrib/eqn2graph/eqn2graph.sh, (2) contrib/grap2graph/grap2graph.sh, and (3) contrib...
The (1) contrib/eqn2graph/eqn2graph.sh, (2) contrib/grap2graph/grap2graph.sh, and (3) contrib/pic2graph/pic2graph.sh scripts in GNU troff (aka groff) 1.21 and earlier do not properly handle certain failed attempts to create temporary directories, which might allow local users to overwrite arbitrary files via a symlink attack on a file in a temporary directory, a different vulnerability than CVE-2004-1296.
- Record
GHSA-wgpq-q6f4-j3jq- Weakness
- CWE-59
- Updated
- 2026-11-02
OSVBELL-CVE-2009-5080
CVE-2009-5080 does not affect BellSoft software
- Record
BELL-CVE-2009-5080- CVSS 2.0
- 3.3 Low
AV:L/AC:M/Au:N/C:N/I:P/A:P - Updated
- 2026-11-02
OSV No score
The (1) contrib/eqn2graph/eqn2graph.sh, (2) contrib/grap2graph/grap2graph.sh, and (3) contrib/pic2graph/pic2graph.sh scripts in GNU troff (aka groff) 1.21 and earlier do not properly handle certain failed attempts to create temporary directories, which might allow local users to overwrite arbitrary files via a symlink attack on a file in a temporary directory, a different vulnerability than CVE-2004-1296.
- Record
CVE-2009-5080- Updated
- 2026-11-02
OSVDEBIAN-CVE-2009-5080 No score
The (1) contrib/eqn2graph/eqn2graph.sh, (2) contrib/grap2graph/grap2graph.sh, and (3) contrib/pic2graph/pic2graph.sh scripts in GNU troff (aka groff) 1.21 and earlier do not properly handle certain failed attempts to create temporary directories, which might allow local users to overwrite arbitrary files via a symlink attack on a file in a temporary directory, a different vulnerability than CVE-2004-1296.
- Record
DEBIAN-CVE-2009-5080- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10031-1 No score
groff-1.22.3-2.5 on GA media
These are all security issues fixed in the groff-1.22.3-2.5 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10031-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2009-5080 No score
The (1) contrib/eqn2graph/eqn2graph.sh, (2) contrib/grap2graph/grap2graph.sh, and (3) contrib/pic2graph/pic2graph.sh scripts in GNU troff (aka groff) 1.21 and earlier do not properly handle certain failed attempts to create temporary directories, which might allow local users to overwrite arbitrary files via a symlink attack on a file in a temporary directory, a different vulnerability than CVE-2004-1296.
- Record
UBUNTU-CVE-2009-5080- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
groffDebian:12 |
before 1.20.1-5 | 1.20.1-5 |
groffDebian:13 |
before 1.20.1-5 | 1.20.1-5 |
groffDebian:14 |
before 1.20.1-5 | 1.20.1-5 |
groffUbuntu:14.04:LTS |
All versions, plus listed versions 1.22.2-31.22.2-41.22.2-5 |
None known |
groffUbuntu:16.04:LTS |
All versions, plus listed versions 1.22.3-11.22.3-21.22.3-41.22.3-51.22.3-61.22.3-7 |
None known |
groffUbuntu:18.04:LTS |
All versions, plus listed versions 1.22.3-91.22.3-10 |
None known |
groffopenSUSE:Tumbleweed |
before 1.22.3-2.5 | 1.22.3-2.5 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
openwall.com/lists/oss-security/2009/08/14/4
cvsweb.openwall.com/cgi/cvsweb.cgi/Owl/packages/groff/groff-1.20.1-owl-tmp.diff.diff?r1=1.1%3Br2=1.2%3Bf=h
mandriva.com/security/advisories?name=MDVSA-2013:085
Show 10 moreShow less
nvd.nist.gov/vuln/detail/CVE-2009-5080
github.com/advisories/GHSA-wgpq-q6f4-j3jq
docs.bell-sw.com/security/cves/CVE-2009-5080
security-tracker.debian.org/tracker/CVE-2009-5080
ubuntu.com/security/CVE-2009-5080
cve.org/CVERecord?id=CVE-2009-5080
suse.com/security/cve/CVE-2009-5044