Vulnerabilities (CVE)

Filtered by vendor Gnu Subscribe
Filtered by product A2ps
Total 5 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2015-8107 1 Gnu 1 A2ps 2024-11-21 6.8 MEDIUM 7.8 HIGH
Format string vulnerability in GNU a2ps 4.14 allows remote attackers to execute arbitrary code.
CVE-2014-0466 1 Gnu 1 A2ps 2024-11-21 6.8 MEDIUM N/A
The fixps script in a2ps 4.14 does not use the -dSAFER option when executing gs, which allows context-dependent attackers to delete arbitrary files or execute arbitrary commands via a crafted PostScript file.
CVE-2004-1377 2 Gnu, Turbolinux 4 A2ps, Turbolinux Home, Turbolinux Server and 1 more 2024-11-20 2.1 LOW N/A
The (1) fixps (aka fixps.in) and (2) psmandup (aka psmandup.in) scripts in a2ps before 4.13 allow local users to overwrite arbitrary files via a symlink attack on temporary files.
CVE-2004-1170 3 Gnu, Sun, Suse 3 A2ps, Java Desktop System, Suse Linux 2024-11-20 10.0 HIGH N/A
a2ps 4.13 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename.
CVE-2001-1593 1 Gnu 1 A2ps 2024-11-20 2.1 LOW N/A
The tempname_ensure function in lib/routines.h in a2ps 4.14 and earlier, as used by the spy_user function and possibly other functions, allows local users to modify arbitrary files via a symlink attack on a temporary file.