Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 525
Alerts This Week
Warning Icon 1 525

Gentoo: GLSA-200501-02 Normal: a2ps Symlink Attack Risk

gentoo
Calendar Grey January 4, 2005
Scroller Gentoo
The a2ps utility is at risk of symlink exploits; it is advisable to perform an upgrade to enhance security. Find further information here.
The fixps and psmandup scripts in the a2ps package are vulnerable to symlink attacks, potentially allowing a local user to overwrite arbitrary files

Summary

Gentoo Linux Security Advisory GLSA 200501-02 https://security.gentoo.org/ Severity: Normal Title: a2ps: Insecure temporary files handling Date: January 04, 2005 Bugs: #75784 ID: 200501-02

Synopsis ======= The fixps and psmandup scripts in the a2ps package are vulnerable to symlink attacks, potentially allowing a local user to overwrite arbitrary files.
Background ========= a2ps is an Any to Postscript filter that can convert to Postscript from many filetypes. fixps is a script that fixes errors in Postscript files. psmandup produces a Postscript file for printing in manual duplex mode.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 app...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory gentoo file handling symlink attack script risk

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory gentoo file handling symlink attack script risk

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround