Search for packages
| purl | pkg:deb/debian/a2ps@1:4.13b-4.3 |
| Next non-vulnerable version | 1:4.14-1.3 |
| Latest non-vulnerable version | 1:4.14-1.3 |
| Risk | 4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-436p-4bjx-7khu
Aliases: CVE-2015-8107 |
a2ps: output_file() format string flaw |
Affected by 0 other vulnerabilities. |
|
VCID-jyey-2ny4-akeh
Aliases: CVE-2014-0466 |
A vulnerability in a2ps' fixps script might allow remote attackers to execute arbitrary code. |
Affected by 3 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-s4ex-ua5v-x3cc
Aliases: CVE-2001-1593 |
security update |
Affected by 3 other vulnerabilities. Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-cyqf-ycjc-wygc | The fixps and psmandup scripts in the a2ps package are vulnerable to symlink attacks, potentially allowing a local user to overwrite arbitrary files. A vulnerability in a2ps filename handling could also result in arbitrary command execution. |
CVE-2004-1377
|
| VCID-mxkn-n54m-57hk | a2ps 4.13 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename. |
CVE-2004-1170
|