CVE-2004-1377
Fixed in a distro release EPSS <1%
The (1) fixps (aka fixps.in) and (2) psmandup (aka psmandup.in) scripts in a2ps before 4.13 allow local users to overwrite arbitrary files via a symlink attack on temporary files.
Products: gnu a2ps, turbolinux_home, turbolinux_server, turbolinux_workstation
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | a2ps | 1:4.13b-4.3 |
| Debian 13 | a2ps | 1:4.13b-4.3 |
| Debian 14 | a2ps | 1:4.13b-4.3 |
| openSUSE Tumbleweed | a2ps | 4.14-6.6 |