CVE-2001-1593
Fixed in a distro release EPSS <1%
The tempname_ensure function in lib/routines.h in a2ps 4.14 and earlier, as used by the spy_user function and possibly other functions, allows local users to modify arbitrary files via a symlink attack on a temporary file.
Products: gnu a2ps
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | a2ps | 1:4.14-1.2 |
| Debian 13 | a2ps | 1:4.14-1.2 |
| Debian 14 | a2ps | 1:4.14-1.2 |
| Debian 6.0 | a2ps | 1:4.14-1.1+deb6u1 |
| Debian 7 | a2ps | 1:4.14-1.1+deb7u1 |
| openSUSE Tumbleweed | a2ps | 4.15-1.1 |