Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown

CVE-2001-1593

Disclosure Date: April 05, 2014 (last updated October 05, 2023)
The tempname_ensure function in lib/routines.h in a2ps 4.14 and earlier, as used by the spy_user function and possibly other functions, allows local users to modify arbitrary files via a symlink attack on a temporary file.
0
0
Attacker Value
Unknown

CVE-2004-1170

Disclosure Date: January 10, 2005 (last updated February 22, 2025)
a2ps 4.13 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename.
0
0
Attacker Value
Unknown

CVE-2004-1377

Disclosure Date: December 27, 2004 (last updated February 22, 2025)
The (1) fixps (aka fixps.in) and (2) psmandup (aka psmandup.in) scripts in a2ps before 4.13 allow local users to overwrite arbitrary files via a symlink attack on temporary files.
0
0