TUCoPS :: Linux :: Apps A-M :: lnx5012.htm

enscript symlinks tmp attack
21th Jan 2002 [SBWID-5012]
COMMAND

	enscript symlinks tmp attack

SYSTEMS AFFECTED

	enscript prior 1.6.2-4.1

PROBLEM

	In Debian Security Advisory  DSA-105-1  [http://www.debian.org/security]
	:
	

	The version of enscript (a tool  to  convert  ASCII  text  to  different
	formats) has been found to create temporary files insecurely.

SOLUTION

	Get enscript 1.6.2-4.1 or later
	

	http://security.debian.org/dists/stable/updates/main/source/enscript_1.6.2-4.1.diff.gz 

	http://security.debian.org/dists/stable/updates/main/source/enscript_1.6.2-4.1.dsc http://security.debian.org/dists/stable/updates/main/source/enscript_1.6.2.orig.tar.gz

	

	

TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2024 AOH