CVE-2001-1593 The tempname_ensure function in lib/routines.h in a2ps 4.14 and earlier, as used by the spy_user function and possibly other functions, allows local users to modify arbitrary files via a symlink attac...
LowCVSS 2.1
EPSS 0.40%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The tempname_ensure function in lib/routines.h in a2ps 4.14 and earlier, as used by the spy_user function and possibly other functions, allows local users to modify arbitrary files via a symlink attack on a temporary file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/a2ps(Debian:12) | < 1:4.14-1.2 | 1:4.14-1.2 |
| debian/a2ps(Debian:13) | < 1:4.14-1.2 | 1:4.14-1.2 |
| debian/a2ps(Debian:14) | < 1:4.14-1.2 | 1:4.14-1.2 |
| GNU a2ps | <= 4.14 | No fix listed |
| GNU a2ps | = 4.10.3 | No fix listed |
| GNU a2ps | = 4.10.4 | No fix listed |
| GNU a2ps | = 4.12 | No fix listed |
| GNU a2ps | = 4.13 | No fix listed |
| GNU a2ps | = 4.13b | No fix listed |
References
- Debian Security Tracker CVE-2001-1593 vendor-advisory
- pkgs.fedoraproject.org
- [oss-security] 20140205 Re: CVE request: a2ps insecure temporary file use mailing-list
- [oss-security] 20140204 Re: CVE request: a2ps insecure temporary file use mailing-list
- [oss-security] 20140205 Re: CVE request: a2ps insecure temporary file use mailing-list
- DSA-2892 vendor-advisory
- bugs.debian.org
- bugzilla.redhat.com
- bugs.debian.org issue-tracking