CVE-2007-6358

pdftops.pl before 1.20 in alternate pdftops filter allows local users to overwrite arbitrary files via a symlink attack on the pdfin.PID.tmp temporary file, which is created when pdftops reads a PDF file from stdin, such as when pdftops is invoked by CUPS...

Gentoo Security Advisory GLSA 200712-14 (cups)

The remote host is missing updates announced in advisory GLSA 200712-14. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Debian: Security Advisory (DSA-1437-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 1437-1] New cupsys packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1437-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 26, 2007 http://www.debian.org/security/faq -...

CVE-2007-6358

pdftops.pl before 1.20 in alternate pdftops filter allows local users to overwrite arbitrary files via a symlink attack on the pdfin.PID.tmp temporary file, which is created when pdftops reads a PDF file from stdin, such as when pdftops is invoked by CUPS...

CVE-2007-6358

CVE-2007-6358 affects the Common UNIX Printing System (cupsys). The flaw is in pdftops.pl (pdftops filter) where insecure handling of a temporary file created when reading PDFs from stdin can be exploited via a symlink to overwrite arbitrary files, enabling local access/denial of service. Public ...