CVE-2002-0044 GNU Enscript 1.6.1 and earlier allows local users to overwrite arbitrary files of the Enscript user via a symlink attack on temporary files.
LowCVSS 3.6
EPSS 0.35%
- Published
- Updated
- Exploit status
- No public exploit known
Description
GNU Enscript 1.6.1 and earlier allows local users to overwrite arbitrary files of the Enscript user via a symlink attack on temporary files.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| GNU enscript | <= 1.6.1 | No fix listed |
| debian linux | = 2.2 | No fix listed |
| redhat linux | = 6.0 | No fix listed |
| redhat linux | = 6.1 | No fix listed |
| redhat linux | = 6.2 | No fix listed |
| redhat linux | = 7.0 | No fix listed |
| redhat linux | = 7.1 | No fix listed |
| redhat linux | = 7.2 | No fix listed |
References
- DSA-105 vendor-advisory
- MDKSA-2002:010 vendor-advisory
- RHSA-2002:012 vendor-advisory
- HPSBTL0201-019 vendor-advisory
- 3920 vdb-entry
- gnu-enscript-tmpfile-symlink(7932) vdb-entry