gs-common: insecure temporary file [LWN.net]

Package(s):

gs-common

CVE #(s):

Created:

April 14, 2003

Updated:

April 16, 2003

Description:

Paul Szabo discovered insecure creation of a temporary file in ps2epsi, a script that is distributed as part of gs-common which contains common files for different Ghostscript releases. ps2epsiuses a temporary file in the process of invoking ghostscript. This file was created in an insecure fashion, which could allow a local attacker to overwrite files owned by a user who invokes ps2epsi.

Alerts:

Debian

DSA-286-1

2003-04-14

(Log in to post comments)