foomatic-rip filter, all versions, used insecurely creates temporary files for storage of PostScript data by rendering the data when the debug mode was enabled. This flaw may be exploited by a local attacker to conduct symlink attacks by overwriting arbitrary files accessible with the privileges of the user running the foomatic-rip universal print filter.
References
| Link | Resource |
|---|---|
| https://access.redhat.com/security/cve/cve-2011-2923 | Third Party Advisory |
| https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-2923 | Issue Tracking Third Party Advisory |
| https://bugzilla.suse.com/show_bug.cgi?id=CVE-2011-2923 | Issue Tracking Third Party Advisory |
| https://security-tracker.debian.org/tracker/CVE-2011-2923 | Third Party Advisory |
| https://access.redhat.com/security/cve/cve-2011-2923 | Third Party Advisory |
| https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-2923 | Issue Tracking Third Party Advisory |
| https://bugzilla.suse.com/show_bug.cgi?id=CVE-2011-2923 | Issue Tracking Third Party Advisory |
| https://security-tracker.debian.org/tracker/CVE-2011-2923 | Third Party Advisory |
Configurations
History
21 Nov 2024, 01:29
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://access.redhat.com/security/cve/cve-2011-2923 - Third Party Advisory | |
| References | () https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-2923 - Issue Tracking, Third Party Advisory | |
| References | () https://bugzilla.suse.com/show_bug.cgi?id=CVE-2011-2923 - Issue Tracking, Third Party Advisory | |
| References | () https://security-tracker.debian.org/tracker/CVE-2011-2923 - Third Party Advisory |
Information
Published : 2019-11-19 21:15
Updated : 2024-11-21 01:29
NVD link : CVE-2011-2923
Mitre link : CVE-2011-2923
CVE.ORG link : CVE-2011-2923
JSON object : View
Products Affected
debian
- debian_linux
linuxfoundation
- foomatic-filters
CWE
CWE-59
Improper Link Resolution Before File Access ('Link Following')