Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 523
Alerts This Week
Warning Icon 1 523

Gentoo: GLSA 200508-04 Normal: pstopnm Arbitrary Code Execution Risk

gentoo
Calendar Grey August 5, 2005
Scroller Gentoo
The Gentoo advisory GLSA 202301-10 addresses the potential hazard associated with the pstopnm tool, highlighting vulnerabilities that may allow unauthorized code execution.
The pstopnm utility, part of the Netpbm tools, contains a vulnerability which can potentially result in the execution of arbitrary code.

Summary

Gentoo Linux Security Advisory GLSA 200508-04 https://security.gentoo.org/ Severity: Normal Title: Netpbm: Arbitrary code execution in pstopnm Date: August 05, 2005 Bugs: #100398 ID: 200508-04

Synopsis ======= The pstopnm utility, part of the Netpbm tools, contains a vulnerability which can potentially result in the execution of arbitrary code.
Background ========= Netpbm is a package of 220 graphics programs and a programming libraries, including pstopnm. pstopnm is a tool which converts PostScript files to PNM image files.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 media-libs/netpbm < 10.28 >= 10.28
========== Max Vozeler reported that pstopnm cal...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory gentoo code execution netpbm arbitrary execution normal severity pstopnm

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory gentoo code execution netpbm arbitrary execution normal severity pstopnm

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround