AOH :: Linux :: Apps A-M :: LNX5012.HTM

enscript symlinks tmp attack

21th Jan 2002 [SBWID-5012]
COMMAND

	enscript symlinks tmp attack

SYSTEMS AFFECTED

	enscript prior 1.6.2-4.1

PROBLEM

	In Debian Security Advisory  DSA-105-1  [http://www.debian.org/security]
	:
	

	The version of enscript (a tool  to  convert  ASCII  text  to  different
	formats) has been found to create temporary files insecurely.

SOLUTION

	Get enscript 1.6.2-4.1 or later
	

	http://security.debian.org/dists/stable/updates/main/source/enscript_1.6.2-4.1.diff.gz 

	http://security.debian.org/dists/stable/updates/main/source/enscript_1.6.2-4.1.dsc http://security.debian.org/dists/stable/updates/main/source/enscript_1.6.2.orig.tar.gz

	

	

The entire AOH site is optimized to look best in Firefox® 3 on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2009 AOH
We do not send spam. If you have received spam bearing an artofhacking.com email address, please forward it with full headers to abuse@artofhacking.com.