CVE-2007-6358

Published: 15/12/2007 Updated: 16/11/2017

CVSS v2 Base Score: 4.9 | Impact Score: 6.9 | Exploitability Score: 3.9

VMScore: 436

Vector: AV:L/AC:L/Au:N/C:N/I:C/A:N

pdftops.pl prior to 1.20 in alternate pdftops filter allows local users to overwrite arbitrary files via a symlink attack on the pdfin.[PID].tmp temporary file, which is created when pdftops reads a PDF file from stdin, such as when pdftops is invoked by CUPS.

Vulnerable Product	Search on Vulmon	Subscribe to Product
glyph and cog pdftops

Wei Wang discovered that the SNMP discovery backend did not correctly calculate the length of strings If a user were tricked into scanning for printers, a remote attacker could send a specially crafted packet and possibly execute arbitrary code ...

Debian Bug report logs - #457453 cupsys: CVE-2007-5849 stack-based buffer overflow leading to code execution in SNMP back-end Package: cupsys; Maintainer for cupsys is (unknown); Reported by: Nico Golde <nion@debianorg> Date: Sat, 22 Dec 2007 14:33:01 UTC Severity: grave Tags: patch, security Found in versions cupsys/12 ...

Debian Bug report logs - #456960 cupsys: CVE-2007-6358 insecure file handling in pdftops filter script Package: cupsys; Maintainer for cupsys is (unknown); Reported by: Nico Golde <nion@debianorg> Date: Tue, 18 Dec 2007 18:21:04 UTC Severity: important Tags: security Fixed in version cupsys/135-1 Done: Kenshi Muto &lt ...

Several local vulnerabilities have been discovered in the Common UNIX Printing System The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2007-5849 Wei Wang discovered that an buffer overflow in the SNMP backend may lead to the execution of arbitrary code CVE-2007-6358 Elias Pipping ...

NVD-CWE-Other https://bugs.gentoo.org/show_bug.cgi?id=201042 http://www.cups.org/articles.php?L515 http://www.debian.org/security/2007/dsa-1437 http://www.gentoo.org/security/en/glsa/glsa-200712-14.xml http://www.securityfocus.com/bid/26919 http://secunia.com/advisories/28139 http://secunia.com/advisories/28113 http://secunia.com/advisories/28200 http://www.ubuntu.com/usn/usn-563-1 http://secunia.com/advisories/28386 http://osvdb.org/42029 https://usn.ubuntu.com/563-1/https://nvd.nist.gov

CVE-2007-6358

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect