| Package | Affected versions | Patched versions |
|---|---|---|
| ghostscript | = 4.3= 4.3.2= 5.10.10= 5.10.10_1= 5.10.12cl= 5.10.15= 5.10.16= 5.10cl= 5.50= 5.50.8= 5.50.8_7= 6.51= 6.52= 6.53= 7.0.4= 7.0.5= 7.0.6= 7.0.7 |
The (1) pj-gs.sh, (2) ps2epsi, (3) pv.sh, and (4) sysvlp.sh scripts in the ESP Ghostscript (espgs) package in Trustix Secure Linux 1.5 through 2.1, and other operating systems, allow local users to overwrite files via a symlink attack on temporary files.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free