Lucene search
RootSSV:62158HistoryApr 14, 2014 - 12:00 a.m.
GNU a2ps任意命令执行漏洞
2014-04-1400:00:00
Root
www.seebug.org
7
0.004 Low
EPSS
Percentile
71.5%
Bugtraq ID:66660
CVE ID:CVE-2014-0466
GNU a2ps是将文件转换为PostScript的过滤器。
a2ps 4.14内的fixps脚本在执行gs时，没有使用-dSAFER选项，这可使上下文独立的攻击者通过特制的PostScript文件，利用此漏洞执行任意命令。
0
GNU a2ps 4.14
目前厂商已经发布了升级补丁以修复漏洞，请下载使用：
http://www.gnu.org/software/a2ps/
Related
nessus
nessus
Fedora 19 : a2ps-4.14-23.fc19 (2014-4676)
2014-05-09 00:00:00
SuSE 11.3 Security Update : a2ps (SAT Patch Number 9064)
2014-04-30 00:00:00
Fedora 20 : a2ps-4.14-23.fc20 (2014-4691)
2014-05-09 00:00:00
gentoo
gentoo
a2ps: Arbitrary code execution
2017-01-29 00:00:00
openvas
openvas
Fedora Update for a2ps FEDORA-2014-4676
2014-05-12 00:00:00
Fedora Update for a2ps FEDORA-2014-4676
2014-05-12 00:00:00
SUSE: Security Advisory (SUSE-SU-2014:0581-1)
2021-06-09 00:00:00
ubuntucve
ubuntucve
CVE-2014-0466
2014-04-03 00:00:00
cve
cve
CVE-2014-0466
2014-04-03 16:15:00
mageia
mageia
Updated a2ps packages fix CVE-2014-0466
2014-04-04 14:58:23
prion
prion
Design/Logic Flaw
2014-04-03 16:15:00
fedora
fedora
[SECURITY] Fedora 20 Update: a2ps-4.14-23.fc20
2014-05-08 09:58:57
[SECURITY] Fedora 19 Update: a2ps-4.14-23.fc19
2014-05-08 10:18:21
alpinelinux
alpinelinux
CVE-2014-0466
2014-04-03 16:15:00
debiancve
debiancve
CVE-2014-0466
2014-04-03 16:15:00
debian
debian
[SECURITY] [DSA 2892-1] a2ps security update
2014-03-31 18:46:17
[SECURITY] [DSA 2892-1] a2ps security update
2014-03-31 18:46:34
securityvulns
securityvulns
[SECURITY] [DSA 2892-1] a2ps security update
2014-04-07 00:00:00
a2ps code execution
2014-04-07 00:00:00
osv
osv
a2ps - security update
2014-03-31 00:00:00
archlinux
archlinux
[ASA-202005-4] a2ps: multiple issues
2020-05-06 00:00:00