| Package | Affected versions | Patched versions |
|---|---|---|
| a2ps | = 4.10.3= 4.10.4= 4.12= 4.13= 4.13b≤ 4.14 |
The tempname_ensure function in lib/routines.h in a2ps 4.14 and earlier, as used by the spy_user function and possibly other functions, allows local users to modify arbitrary files via a symlink attack on a temporary file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free