UnratedFix available
groff — security advisory
The groffer script in the Groff package 1.18 and later versions, as used in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files.
- Products
- groff
- Affected versions
- Not specified
- Fixed versions
- 1.18.1.1-2
- CVEs
- CVE-2004-0969
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 14:24 UTC · Revision 1
Source evidence
The groffer script in the Groff package 1.18 and later versions, as used in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files.
osv:DEBIAN-CVE-2004-0969
groff
Fixed versions: 1.18.1.1-2
groff
Fixed versions: 1.18.1.1-2
groff
Fixed versions: 1.18.1.1-2
Complete source record
{
"id": "74ef4da7f60f2f02a5c3ef24d3ac589288c979d8ffbb9074ddfe08fceb1e8416",
"url": "https://osv.dev/vulnerability/DEBIAN-CVE-2004-0969",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "DEBIAN-CVE-2004-0969",
"summary": "The groffer script in the Groff package 1.18 and later versions, as used in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files.",
"evidence": "osv:DEBIAN-CVE-2004-0969",
"products": [
{
"name": {
"value": "groff",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1.18.1.1-2",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "groff",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1.18.1.1-2",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "groff",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1.18.1.1-2",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "DEBIAN-CVE-2004-0969",
"aliases": [
"DEBIAN-CVE-2004-0969"
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.18.1.1-2"
}
]
}
],
"package": {
"name": "groff",
"purl": "pkg:deb/debian/groff?arch=source&distro=bookworm",
"ecosystem": "Debian:12"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2004-0969.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.18.1.1-2"
}
]
}
],
"package": {
"name": "groff",
"purl": "pkg:deb/debian/groff?arch=source&distro=trixie",
"ecosystem": "Debian:13"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2004-0969.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.18.1.1-2"
}
]
}
],
"package": {
"name": "groff",
"purl": "pkg:deb/debian/groff?arch=source&distro=forky",
"ecosystem": "Debian:14"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2004-0969.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
}
],
"modified": "2026-10-21T15:47:32.290366574Z",
"provider": "osv",
"upstream": [
"CVE-2004-0969"
],
"references": [
"https://security-tracker.debian.org/tracker/CVE-2004-0969"
]
},
"related_cves": [
{
"value": "CVE-2004-0969",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 393971,
"published_at": "2005-02-09T05:00:00+00:00"
}