a2ps -- insecure temporary file creation

2004-12-2700:00:00

vuxml.freebsd.org

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

EPSS

Percentile

5.1%

JSON

A Secunia Security Advisory reports that Javier
Fernández-Sanguino Peña has found temporary file
creation vulnerabilities in the fixps and psmandup scripts
which are part of a2ps. These vulnerabilities could lead to
an attacker overwriting arbitrary files with the credentials
of the user running the vulnerable scripts.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarcha2ps-a4< 4.13b_3UNKNOWN
FreeBSDanynoarcha2ps-letter< 4.13b_3UNKNOWN
FreeBSDanynoarcha2ps-letterdj< 4.13b_3UNKNOWN