117 matches found
Fedora 19 : a2ps-4.14-23.fc19 (2014-4676)
This update fixes a security problem in the fixps utility CVE-2014-0466. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...
Fedora 20 : a2ps-4.14-23.fc20 (2014-4691)
This update fixes a security problem in the fixps utility CVE-2014-0466. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...
[SECURITY] Fedora 19 Update: a2ps-4.14-23.fc19
The a2ps filter converts text and other types of files to PostScript. A2ps has pretty-printing capabilities and includes support for a wide number of programming languages, encodings ISO Latins, Cyrillic, etc., and medias...
[SECURITY] Fedora 20 Update: a2ps-4.14-23.fc20
The a2ps filter converts text and other types of files to PostScript. A2ps has pretty-printing capabilities and includes support for a wide number of programming languages, encodings ISO Latins, Cyrillic, etc., and medias...
SuSE 11.3 Security Update : a2ps (SAT Patch Number 9064)
The text to postscript converter a2ps received a security update. The fixps script did not call ghostscript with the -DSAFER option, allowing command execution by attacker supplied postscript files. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in th...
GNU a2ps任意命令执行漏洞
Bugtraq ID:66660 CVE ID:CVE-2014-0466 GNU a2ps是将文件转换为PostScript的过滤器。 a2ps 4.14内的fixps脚本在执行gs时，没有使用-dSAFER选项，这可使上下文独立的攻击者通过特制的PostScript文件，利用此漏洞执行任意命令。 0 GNU a2ps 4.14 目前厂商已经发布了升级补丁以修复漏洞，请下载使用： http://www.gnu.org/software/a2ps/...
Mandriva Linux Security Advisory : a2ps (MDVSA-2014:076)
Updated a2ps packages fix security vulnerability : Brian M. Carlson reported that a2ps's fixps script does not invoke gs with the -dSAFER option. Consequently executing fixps on a malicious PostScript file could result in files being deleted or arbitrary commands being executed with the privilege...
[SECURITY] [DSA 2892-1] a2ps security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2892-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso March 31, 2014 http://www.debian.org/security/faq -...
a2ps code execution
Macro are not filtered in Postscript processin...
CVE-2001-1593
The tempnameensure function in lib/routines.h in a2ps 4.14 and earlier, as used by the spyuser function and possibly other functions, allows local users to modify arbitrary files via a symlink attack on a temporary file...
CVE-2001-1593
The tempnameensure function in lib/routines.h in a2ps 4.14 and earlier, as used by the spyuser function and possibly other functions, allows local users to modify arbitrary files via a symlink attack on a temporary file...
DEBIAN-CVE-2001-1593
The tempnameensure function in lib/routines.h in a2ps 4.14 and earlier, as used by the spyuser function and possibly other functions, allows local users to modify arbitrary files via a symlink attack on a temporary file...
CVE-2001-1593
Jakub Wilk found that a2ps, a tool to convert text and other types of files to PostScript, insecurely used a temporary file in spyuser. A local attacker could use this flaw to perform a symbolic link attack to modify an arbitrary file accessible to the user running a2ps...
UBUNTU-CVE-2001-1593
Jakub Wilk found that a2ps, a tool to convert text and other types of files to PostScript, insecurely used a temporary file in spyuser. A local attacker could use this flaw to perform a symbolic link attack to modify an arbitrary file accessible to the user running a2ps...
CVE-2001-1593
The tempnameensure function in lib/routines.h in a2ps 4.14 and earlier, as used by the spyuser function and possibly other functions, allows local users to modify arbitrary files via a symlink attack on a temporary file...
CVE-2001-1593
CVE-2001-1593 affects the a2ps package (versions 4.14 and earlier). The vulnerability is in the tempname_ensure function (lib/routines.h), used by the spy_user function, allowing local users to modify arbitrary files via a symlink attack on a temporary file. Impact is local file modification with...
CVE-2001-1593
The tempnameensure function in lib/routines.h in a2ps 4.14 and earlier, as used by the spyuser function and possibly other functions, allows local users to modify arbitrary files via a symlink attack on a temporary file...
Updated a2ps packages fix CVE-2014-0466
Updated a2ps packages fix security vulnerability: Brian M. Carlson reported that a2ps's fixps script does not invoke gs with the -dSAFER option. Consequently executing fixps on a malicious PostScript file could result in files being deleted or arbitrary commands being executed with the privileges...
MGASA-2014-0161 Updated a2ps packages fix CVE-2014-0466
Updated a2ps packages fix security vulnerability: Brian M. Carlson reported that a2ps's fixps script does not invoke gs with the -dSAFER option. Consequently executing fixps on a malicious PostScript file could result in files being deleted or arbitrary commands being executed with the privileges...