Threat Investigation
Request a demo

CVE-2000-0803

Critical

Description

GNU Groff uses the current working directory to find a device description file, which allows a local user to gain additional privileges by including a malicious postpro directive in the description file, which is executed when another user runs groff.

SeverityCritical
CVSS10.0
Exploit probability84. percentile2.3%
ProductGnu Groff
PublishedDec 19, 2000
First seenDec 19, 2000

How to fix

Update
  • gnu groff1.17 or later

Affected products

ProductAffected versionsFixed in
gnu groffv < 1.171.17

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.