Candidate: CVE-2009-1962
PublicDate: 2009-06-08 01:00:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1962
 http://www.openwall.com/lists/oss-security/2009/04/01/6
Description:
 Xfig, possibly 3.2.5, allows local users to read and write arbitrary files
 via a symlink attack on the (1) xfig-eps[PID], (2) xfig-pic[PID].pix, (3)
 xfig-pic[PID].err, (4) xfig-pcx[PID].pix, (5) xfig-xfigrc[PID], (6)
 xfig[PID], (7) xfig-print[PID], (8) xfig-export[PID].err, (9)
 xfig-batch[PID], (10) xfig-exp[PID], or (11) xfig-spell.[PID] temporary
 files, where [PID] is a process ID.
Ubuntu-Description:
Notes:
Bugs:
Priority: low
Discovered-by:
Assigned-to:
CVSS: 

Patches_xfig:
upstream_xfig: released (3.2.5.a-1)
dapper_xfig: ignored (reached end-of-life)
hardy_xfig: ignored (reached end-of-life)
intrepid_xfig: needs-triage (reached end-of-life)
jaunty_xfig: ignored (reached end-of-life)
karmic_xfig: ignored (reached end-of-life)
lucid_xfig: ignored (reached end-of-life)
maverick_xfig: ignored (reached end-of-life)
natty_xfig: ignored (reached end-of-life)
oneiric_xfig: ignored (reached end-of-life)
precise_xfig: ignored (reached end-of-life)
precise/esm_xfig: DNE (precise was needs-triage)
quantal_xfig: ignored (reached end-of-life)
raring_xfig: ignored (reached end-of-life)
saucy_xfig: ignored (reached end-of-life)
trusty_xfig: ignored (reached end-of-life)
trusty/esm_xfig: DNE (trusty was needs-triage)
utopic_xfig: ignored (reached end-of-life)
vivid_xfig: ignored (reached end-of-life)
vivid/stable-phone-overlay_xfig: DNE
vivid/ubuntu-core_xfig: DNE
wily_xfig: ignored (reached end-of-life)
xenial_xfig: ignored (end of standard support, was needs-triage)
yakkety_xfig: ignored (reached end-of-life)
zesty_xfig: ignored (reached end-of-life)
artful_xfig: ignored (reached end-of-life)
bionic_xfig: not-affected (1:3.2.6a-2)
cosmic_xfig: ignored (reached end-of-life)
disco_xfig: ignored (reached end-of-life)
eoan_xfig: ignored (reached end-of-life)
focal_xfig: not-affected (1:3.2.7b-2)
groovy_xfig: ignored (reached end-of-life)
hirsute_xfig: not-affected (1:3.2.7b-4)
impish_xfig: not-affected (1:3.2.8-3)
jammy_xfig: not-affected (1:3.2.8-3)
devel_xfig: not-affected (1:3.2.8-3)