Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Gentoo: Security Alert 200501-31 - Risk of Privilege Escalation in XeTeX

gentoo
Calendar Grey January 23, 2005
Scroller Gentoo
Several security flaws in Gentoo's teTeX, pTeX, and CSTeX packages may enable remote code execution as well as complications with file management.
teTeX, pTeX and CSTeX make use of vulnerable Xpdf code which may allow the remote execution of arbitrary code

Summary

Gentoo Linux Security Advisory GLSA 200501-31 https://security.gentoo.org/ Severity: Normal Title: teTeX, pTeX, CSTeX: Multiple vulnerabilities Date: January 23, 2005 Bugs: #75801 ID: 200501-31

Synopsis ======= teTeX, pTeX and CSTeX make use of vulnerable Xpdf code which may allow the remote execution of arbitrary code. Furthermore, the xdvizilla script is vulnerable to temporary file handling issues.
Background ========= teTeX is a complete and open source TeX distribution. CSTeX is another TeX distribution including Czech and Slovak support. pTeX is another alternative that allows Japanese publishing with TeX. xdvizilla is an auxiliary script used to integrate DVI file viewing in Mozilla-based browsers.
...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory gentoo file handling remote execution code exploit

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory gentoo file handling remote execution code exploit

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround