AOH :: Linux :: Apps N-Z :: A6153.HTM

ps2epsi insecure temporary file creation

16th Apr 2003 [SBWID-6153]
COMMAND

	ps2epsi insecure temporary file creation

SYSTEMS AFFECTED

	version 0.3.3.0

PROBLEM

	Paul Szabo discovered insecure creation of a temporary file in  ps2epsi,
	a script that is most of the  time  distributed  as  part  of  gs-common
	which contains common files for different Ghostscript releases.  ps2epsi
	uses a temporary file in the process of invoking ghostscript. This  file
	was created in an insecure fashion, which could allow a  local  attacker
	to overwrite files owned by a user who invokes ps2epsi.

SOLUTION

	Upgrade.
	
	under debian, upgrade gs-common package.

The entire AOH site is optimized to look best in Firefox® 3 on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2009 AOH
We do not send spam. If you have received spam bearing an artofhacking.com email address, please forward it with full headers to abuse@artofhacking.com.