Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
6.8
CVSSv2

CVE-2014-0466

Published: 03/04/2014 Updated: 16/12/2017
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
VMScore: 605
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Subscribe to A2ps

Vulnerability Summary

The fixps script in a2ps 4.14 does not use the -dSAFER option when executing gs, which allows context-dependent malicious users to delete arbitrary files or execute arbitrary commands via a crafted PostScript file.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

gnu a2ps 4.14

Vendor Advisories

Debian CVElist Bug Report Logs: a2ps: CVE-2001-1593: insecure use of /tmp
Debian Bug report logs - #737385 a2ps: CVE-2001-1593: insecure use of /tmp Package: a2ps; Maintainer for a2ps is Debian QA Group <packages@qadebianorg>; Source for a2ps is src:a2ps (PTS, buildd, popcon) Reported by: Jakub Wilk <jwilk@debianorg> Date: Sun, 2 Feb 2014 10:45:06 UTC Severity: important Tags: securit ...
Debian CVElist Bug Report Logs: a2ps: CVE-2014-0466: does not invoke gs with -dSAFER
Debian Bug report logs - #742902 a2ps: CVE-2014-0466: does not invoke gs with -dSAFER Package: a2ps; Maintainer for a2ps is Debian QA Group <packages@qadebianorg>; Source for a2ps is src:a2ps (PTS, buildd, popcon) Reported by: "brian m carlson" <sandals@crustytoothpastenet> Date: Fri, 28 Mar 2014 20:06:02 UTC Se ...
Debian Security Advisories: DSA-2892-1 a2ps -- security update
Several vulnerabilities have been found in a2ps, an Anything to PostScript converter and pretty-printer The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2001-1593 The spy_user function which is called when a2ps is invoked with the --debug flag insecurely used temporary files CVE-2014-0466 Brian ...
Arch Linux Issues:
The fixps script in a2ps 414 does not use the -dSAFER option when executing gs, which allows context-dependent attackers to delete arbitrary files or execute arbitrary commands via a crafted PostScript file ...

References

NVD-CWE-noinfohttp://www.debian.org/security/2014/dsa-2892https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=742902http://www.securityfocus.com/bid/66660https://security.gentoo.org/glsa/201701-67http://lists.opensuse.org/opensuse-updates/2014-04/msg00021.htmlhttps://nvd.nist.govhttps://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737385https://www.debian.org/security/./dsa-2892
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
injectionCVE-2024-30983CVE-2023-4235CVE-2024-21338privilegeencryptionCVE-2023-4232CVE-2024-31497CVE-2024-32341
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook