rhsa-2002_004
Vulnerability from csaf_redhat
Published
2002-01-14 16:16
Modified
2024-11-21 22:15
Summary
Red Hat Security Advisory: : : : New groff packages available to fix security problems
Notes
Topic
New groff packages have been made available that fix an overflow in groff.
If the printing system running this is a security issue, it is recommended
to update to the new, fixed packages.
[Update Jan 22 2003]
Added description of CVE-2001-1022 which was also fixed by these erratum
packages
Details
Groff is a document formatting system. The groff preprocessor contains an
exploitable buffer overflow. If groff can be invoked within the LPRng
printing system, an attacker can gain rights as the "lp" user.
Remote exploitation may be possible if lpd is running and is accessible
remotely, and the attacker knows the name of the printer and spoolfile.
The Common Vulnerabilities and Exposures project (cve.mitre.org) has
assigned the name CAN-2002-0003 to this issue.
Thanks to zen-parse for bringing this bug to our attention.
In addition, this erratum also fixes a format string vulnerability in
groff's pic utility which allows remote attackers to bypass the -S option
and execute arbitrary commands via format string specifiers in the plot
command. The Common Vulnerabilities and Exposures project (cve.mitre.org)
has assigned the name CVE-2001-1022 to this issue.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "New groff packages have been made available that fix an overflow in groff.\nIf the printing system running this is a security issue, it is recommended\nto update to the new, fixed packages.\n\n[Update Jan 22 2003]\nAdded description of CVE-2001-1022 which was also fixed by these erratum\npackages",
"title": "Topic"
},
{
"category": "general",
"text": "Groff is a document formatting system. The groff preprocessor contains an\nexploitable buffer overflow. If groff can be invoked within the LPRng\nprinting system, an attacker can gain rights as the \"lp\" user.\n\nRemote exploitation may be possible if lpd is running and is accessible\nremotely, and the attacker knows the name of the printer and spoolfile.\n\nThe Common Vulnerabilities and Exposures project (cve.mitre.org) has\nassigned the name CAN-2002-0003 to this issue.\n\nThanks to zen-parse for bringing this bug to our attention.\n\nIn addition, this erratum also fixes a format string vulnerability in\ngroff\u0027s pic utility which allows remote attackers to bypass the -S option\nand execute arbitrary commands via format string specifiers in the plot\ncommand. The Common Vulnerabilities and Exposures project (cve.mitre.org)\nhas assigned the name CVE-2001-1022 to this issue.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2002:004",
"url": "https://access.redhat.com/errata/RHSA-2002:004"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2002/rhsa-2002_004.json"
}
],
"title": "Red Hat Security Advisory: : : : New groff packages available to fix security problems",
"tracking": {
"current_release_date": "2024-11-21T22:15:25+00:00",
"generator": {
"date": "2024-11-21T22:15:25+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2002:004",
"initial_release_date": "2002-01-14T16:16:00+00:00",
"revision_history": [
{
"date": "2002-01-14T16:16:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2002-01-07T00:00:00+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-21T22:15:25+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Linux 7.0",
"product": {
"name": "Red Hat Linux 7.0",
"product_id": "Red Hat Linux 7.0",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:linux:7.0"
}
}
},
{
"category": "product_name",
"name": "Red Hat Linux 7.1",
"product": {
"name": "Red Hat Linux 7.1",
"product_id": "Red Hat Linux 7.1",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:linux:7.1"
}
}
},
{
"category": "product_name",
"name": "Red Hat Linux 7.2",
"product": {
"name": "Red Hat Linux 7.2",
"product_id": "Red Hat Linux 7.2",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:linux:7.2"
}
}
}
],
"category": "product_family",
"name": "Red Hat Linux"
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2001-1022",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1616642"
}
],
"notes": [
{
"category": "description",
"text": "Format string vulnerability in pic utility in groff 1.16.1 and other versions, and jgroff before 1.15, allows remote attackers to bypass the -S option and execute arbitrary commands via format string specifiers in the plot command.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "security flaw",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"Red Hat Linux 7.0",
"Red Hat Linux 7.1",
"Red Hat Linux 7.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2001-1022"
},
{
"category": "external",
"summary": "RHBZ#1616642",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1616642"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2001-1022",
"url": "https://www.cve.org/CVERecord?id=CVE-2001-1022"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2001-1022",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2001-1022"
}
],
"release_date": "2001-07-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2002-01-14T16:16:00+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nTo update all RPMs for your particular architecture, run:\n\nrpm -Fvh [filenames]\n\nwhere [filenames] is a list of the RPMs you wish to upgrade. Only those\nRPMs which are currently installed will be updated. Those RPMs which are\nnot installed but included in the list will not be updated. Note that you\ncan also use wildcards (*.rpm) if your current directory *only* contains\nthe\ndesired RPMs.\n\nPlease note that this update is also available via Red Hat Network. Many\npeople find this an easier way to apply updates. To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
"product_ids": [
"Red Hat Linux 7.0",
"Red Hat Linux 7.1",
"Red Hat Linux 7.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2002:004"
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "security flaw"
},
{
"cve": "CVE-2002-0003",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1616712"
}
],
"notes": [
{
"category": "description",
"text": "Buffer overflow in the preprocessor in groff 1.16 and earlier allows remote attackers to gain privileges via lpd in the LPRng printing system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "security flaw",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"Red Hat Linux 7.0",
"Red Hat Linux 7.1",
"Red Hat Linux 7.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2002-0003"
},
{
"category": "external",
"summary": "RHBZ#1616712",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1616712"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2002-0003",
"url": "https://www.cve.org/CVERecord?id=CVE-2002-0003"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2002-0003",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2002-0003"
}
],
"release_date": "2002-01-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2002-01-14T16:16:00+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nTo update all RPMs for your particular architecture, run:\n\nrpm -Fvh [filenames]\n\nwhere [filenames] is a list of the RPMs you wish to upgrade. Only those\nRPMs which are currently installed will be updated. Those RPMs which are\nnot installed but included in the list will not be updated. Note that you\ncan also use wildcards (*.rpm) if your current directory *only* contains\nthe\ndesired RPMs.\n\nPlease note that this update is also available via Red Hat Network. Many\npeople find this an easier way to apply updates. To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
"product_ids": [
"Red Hat Linux 7.0",
"Red Hat Linux 7.1",
"Red Hat Linux 7.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2002:004"
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "security flaw"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.