LWN.net Logo

LPRng: insecure temporary file

Package(s):LPRng CVE #(s):CAN-2003-0136
Created:April 14, 2003 Updated:June 16, 2003
Description: Karol Lewandowski discovered that psbanner, a printer filter that creates a PostScript format banner and is part of LPRng, insecurely creates a temporary file for debugging purpose when it is configured as filter. The program does not check whether this file already exists or is linked to another place writes its current environment and called arguments to the file unconditionally with the user id daemon.
Alerts:
Gentoo 200306-04 2003-06-14
Immunix IMNX-2003-7+-013-01 2003-06-04
Yellow Dog YDU-20030602-5 2003-06-02
Mandrake MDKSA-2003:060 2003-05-21
Red Hat RHSA-2003:142-01 2003-04-24
Debian DSA-285-1 2003-04-14

(Log in to post comments)

Copyright © 2012, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds