VulnerabilityModified
CVE-2004-1377
The (1) fixps (aka fixps.in) and (2) psmandup (aka psmandup.in) scripts in a2ps before 4.13 allow local users to overwrite arbitrary files via a symlink attack on temporary files.
LOW 2.1EPSS 0.36%
Does this matter?
Lower severity and a low EPSS score (0.36%). Track it; it rarely justifies an emergency change on its own.
Description
The (1) fixps (aka fixps.in) and (2) psmandup (aka psmandup.in) scripts in a2ps before 4.13 allow local users to overwrite arbitrary files via a symlink attack on temporary files.
- CVSS 2.0
- 2.1 LOWAV:L/AC:L/Au:N/C:N/I:P/A:N
- EPSS
- 0.36% probability · 30th percentile
- CISA KEV
- Not listed
- Affected
- gnu/a2ps · turbolinux/turbolinux home · turbolinux/turbolinux server · turbolinux/turbolinux workstation
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/13641Vendor Advisory
- http://www.gentoo.org/security/en/glsa/glsa-200501-02.xmlPatch
- http://www.securityfocus.com/bid/12108Patch
- http://www.securityfocus.com/bid/12109Patch
- http://www.vuxml.org/freebsd/9168253c-5a6d-11d9-a9e7-0001020eed82.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18671
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18672
- http://secunia.com/advisories/13641Vendor Advisory
- http://www.gentoo.org/security/en/glsa/glsa-200501-02.xmlPatch
- http://www.securityfocus.com/bid/12108Patch
- http://www.securityfocus.com/bid/12109Patch
- http://www.vuxml.org/freebsd/9168253c-5a6d-11d9-a9e7-0001020eed82.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18671
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18672
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.