Lucene search
HistoryApr 03, 2014 - 4:15 p.m.
CVE-2014-0466
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.6 High
AI Score
Confidence
High
0.004 Low
EPSS
Percentile
74.4%
The fixps script in a2ps 4.14 does not use the -dSAFER option when executing gs, which allows context-dependent attackers to delete arbitrary files or execute arbitrary commands via a crafted PostScript file.
Affected configurations
Node
gnua2psMatch4.14
Related
nessus
nessus
Mandriva Linux Security Advisory : a2ps (MDVSA-2014:076)
2014-04-11 00:00:00
GLSA-201701-67 : a2ps: Arbitrary code execution
2017-01-30 00:00:00
Fedora 19 : a2ps-4.14-23.fc19 (2014-4676)
2014-05-09 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2014-0161)
2022-01-28 00:00:00
SUSE: Security Advisory (SUSE-SU-2014:0581-1)
2021-06-09 00:00:00
Fedora Update for a2ps FEDORA-2014-4676
2014-05-12 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: a2ps-4.14-23.fc20
2014-05-08 09:58:57
[SECURITY] Fedora 19 Update: a2ps-4.14-23.fc19
2014-05-08 10:18:21
alpinelinux
alpinelinux
CVE-2014-0466
2014-04-03 16:15:00
debiancve
debiancve
CVE-2014-0466
2014-04-03 16:15:39
gentoo
gentoo
a2ps: Arbitrary code execution
2017-01-29 00:00:00
seebug
seebug
GNU a2psไปปๆๅฝไปคๆง่กๆผๆด
2014-04-14 00:00:00
prion
prion
Design/Logic Flaw
2014-04-03 16:15:00
cve
cve
CVE-2014-0466
2014-04-03 16:15:39
ubuntucve
ubuntucve
CVE-2014-0466
2014-04-03 00:00:00
mageia
mageia
Updated a2ps packages fix CVE-2014-0466
2014-04-04 14:58:23
cvelist
cvelist
CVE-2014-0466
2014-04-03 15:00:00
debian
debian
[SECURITY] [DSA 2892-1] a2ps security update
2014-03-31 18:46:17
[SECURITY] [DSA 2892-1] a2ps security update
2014-03-31 18:46:17
archlinux
archlinux
[ASA-202005-4] a2ps: multiple issues
2020-05-06 00:00:00
osv
osv
a2ps - security update
2014-03-31 00:00:00
securityvulns
securityvulns
a2ps code execution
2014-04-07 00:00:00
[SECURITY] [DSA 2892-1] a2ps security update
2014-04-07 00:00:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.6 High
AI Score
Confidence
High
0.004 Low
EPSS
Percentile
74.4%
Related for NVD:CVE-2014-0466