Filtered by vendor Gnu Subscriptions
Filtered by product A2ps Subscriptions
Total 5 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2001-1593 1 Gnu 1 A2ps 2024-08-08 N/A
The tempname_ensure function in lib/routines.h in a2ps 4.14 and earlier, as used by the spy_user function and possibly other functions, allows local users to modify arbitrary files via a symlink attack on a temporary file.
CVE-2004-1377 2 Gnu, Turbolinux 4 A2ps, Turbolinux Home, Turbolinux Server and 1 more 2024-08-08 N/A
The (1) fixps (aka fixps.in) and (2) psmandup (aka psmandup.in) scripts in a2ps before 4.13 allow local users to overwrite arbitrary files via a symlink attack on temporary files.
CVE-2004-1170 3 Gnu, Sun, Suse 3 A2ps, Java Desktop System, Suse Linux 2024-08-08 N/A
a2ps 4.13 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename.
CVE-2014-0466 1 Gnu 1 A2ps 2024-08-06 N/A
The fixps script in a2ps 4.14 does not use the -dSAFER option when executing gs, which allows context-dependent attackers to delete arbitrary files or execute arbitrary commands via a crafted PostScript file.
CVE-2015-8107 1 Gnu 1 A2ps 2024-08-06 N/A
Format string vulnerability in GNU a2ps 4.14 allows remote attackers to execute arbitrary code.