GNU A2PS fixps.in脚本不安全临时文件漏洞

漏洞信息详情

GNU A2PS fixps.in脚本不安全临时文件漏洞

• CNNVD编号：CNNVD-200412-122
• 危害等级： 低危
  
  
• CVE编号：
  CVE-2004-1377
  
• 漏洞类型：
  
  
  访问验证错误
  
• 发布时间：
  
  2004-12-27
  
• 威胁类型：
  
  
  本地
  
• 更新时间：
  
  2005-10-20
  
• 厂        商：
  
  turbolinux
• 漏洞来源：
  Discovery is credi…

a2ps 4.13以前版本的(1)fixps(也称为 fixps.in)和(2)psmandup (也称为 psmandup.in) 存在漏洞。本地用户可以借助对临时文件的符号链接攻击覆盖任意文件。

Please see the referenced advisories for details on obtaining and applying the appropriate updates.
Turbolinux Home

• Turbolinux a2ps-4.13-11.i586.rpmTurbolinux 10 Desktop, Turbolinux 10 F…, Turbolinux Home
  ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/u
  pdates/RPMS/a2ps-4.13-11.i586.rpm

MandrakeSoft Linux Mandrake 10.1 x86_64

• Mandriva a2ps-4.13b-5.2.101mdk.src.rpmMandrakelinux 10.1/X86_64:
  
  http://www.mandriva.com/en/download
• Mandriva a2ps-4.13b-5.2.101mdk.x86_64.rpmMandrakelinux 10.1/X86_64:
  
  http://www.mandriva.com/en/download
• Mandriva a2ps-devel-4.13b-5.2.101mdk.x86_64.rpmMandrakelinux 10.1/X86_64:
  
  http://www.mandriva.com/en/download
• Mandriva a2ps-static-devel-4.13b-5.2.101mdk.x86_64.rpmMandrakelinux 10.1/X86_64:
  
  http://www.mandriva.com/en/download

MandrakeSoft Linux Mandrake 10.1

• Mandriva a2ps-4.13b-5.2.101mdk.i586.rpmMandrakelinux 10.1:
  
  http://www.mandriva.com/en/download
• Mandriva a2ps-4.13b-5.2.101mdk.src.rpmMandrakelinux 10.1:
  
  http://www.mandriva.com/en/download
• Mandriva a2ps-devel-4.13b-5.2.101mdk.i586.rpmMandrakelinux 10.1:
  
  http://www.mandriva.com/en/download
• Mandriva a2ps-static-devel-4.13b-5.2.101mdk.i586.rpmMandrakelinux 10.1:
  
  http://www.mandriva.com/en/download

MandrakeSoft Linux Mandrake 10.2 x86_64

• Mandriva a2ps-4.13b-6.1.102mdk.src.rpmMandrakelinux 10.2/X86_64:
  
  http://www.mandriva.com/en/download
• Mandriva a2ps-4.13b-6.1.102mdk.x86_64.rpmMandrakelinux 10.2/X86_64:
  
  http://www.mandriva.com/en/download
• Mandriva a2ps-devel-4.13b-6.1.102mdk.x86_64.rpmMandrakelinux 10.2/X86_64:
  
  http://www.mandriva.com/en/download
• Mandriva a2ps-static-devel-4.13b-6.1.102mdk.x86_64.rpmMandrakelinux 10.2/X86_64:
  
  http://www.mandriva.com/en/download

MandrakeSoft Linux Mandrake 10.2

• Mandriva a2ps-4.13b-6.1.102mdk.i586.rpmMandrakelinux 10.2:
  
  http://www.mandriva.com/en/download
• Mandriva a2ps-4.13b-6.1.102mdk.src.rpmMandrakelinux 10.2:
  
  http://www.mandriva.com/en/download
• Mandriva a2ps-devel-4.13b-6.1.102mdk.i586.rpmMandrakelinux 10.2:
  
  http://www.mandriva.com/en/download
• Mandriva a2ps-static-devel-4.13b-6.1.102mdk.i586.rpmMandrakelinux 10.2:
  
  http://www.mandriva.com/en/download

MandrakeSoft Corporate Server 2.1 x86_64

• Mandriva a2ps-4.13-14.2.C21mdk.src.rpmCorporate Server 2.1/X86_64:
  
  http://www.mandriva.com/en/download
• Mandriva a2ps-4.13-14.2.C21mdk.x86_64.rpmCorporate Server 2.1/X86_64:
  
  http://www.mandriva.com/en/download
• Mandriva a2ps-devel-4.13-14.2.C21mdk.x86_64.rpmCorporate Server 2.1/X86_64:
  
  http://www.mandriva.com/en/download
• Mandriva a2ps-static-devel-4.13-14.2.C21mdk.x86_64.rpmCorporate Server 2.1/X86_64:
  
  http://www.mandriva.com/en/download

MandrakeSoft Corporate Server 2.1

• Mandriva a2ps-4.13-14.2.C21mdk.i586.rpmCorporate Server 2.1:
  
  http://www.mandriva.com/en/download
• Mandriva a2ps-4.13-14.2.C21mdk.src.rpmCorporate Server 2.1:
  
  http://www.mandriva.com/en/download
• Mandriva a2ps-devel-4.13-14.2.C21mdk.i586.rpmCorporate Server 2.1:
  
  http://www.mandriva.com/en/download
• Mandriva a2ps-static-devel-4.13-14.2.C21mdk.i586.rpmCorporate Server 2.1:
  
  http://www.mandriva.com/en/download

MandrakeSoft Corporate Server 3.0 x86_64

• Mandriva a2ps-4.13b-5.2.C30mdk.src.rpmCorporate 3.0/X86_64:
  
  http://www.mandriva.com/en/download
• Mandriva a2ps-4.13b-5.2.C30mdk.x86_64.rpmCorporate 3.0/X86_64:
  
  http://www.mandriva.com/en/download
• Mandriva a2ps-devel-4.13b-5.2.C30mdk.x86_64.rpmCorporate 3.0/X86_64:
  
  http://www.mandriva.com/en/download
• Mandriva a2ps-static-devel-4.13b-5.2.C30mdk.x86_64.rpmCorporate 3.0/X86_64:
  
  http://www.mandriva.com/en/download

MandrakeSoft Corporate Server 3.0

• Mandriva a2ps-4.13b-5.2.C30mdk.i586.rpm Corporate 3.0:
  
  http://www.mandriva.com/en/download
• Mandriva a2ps-4.13b-5.2.C30mdk.src.rpm Corporate 3.0:
  
  http://www.mandriva.com/en/download
• Mandriva a2ps-devel-4.13b-5.2.C30mdk.i586.rpm Corporate 3.0:
  
  http://www.mandriva.com/en/download
• Mandriva a2ps-static-devel-4.13b-5.2.C30mdk.i586.rpm Corporate 3.0:
  
  http://www.mandriva.com/en/download

Turbolinux Turbolinux Workstation 7.0

• Turbolinux a2ps-4.13-11.i586.rpmTurbolinux 7 Workstation
  ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/
  7/updates/RPMS/a2ps-4.13-11.i586.rpm

Turbolinux Turbolinux Server 8.0

• Turbolinux a2ps-4.13-11.i586.rpmTurbolinux 8 Server
  ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/upd
  ates/RPMS/a2ps-4.13-11.i586.rpm

Turbolinux Turbolinux Workstation 8.0

• Turbolinux a2ps-4.13-11.i586.rpmTurbolinux 8 Workstation
  

  参考网址

  来源: BID
  名称: 12109
  链接:http://www.securityfocus.com/bid/12109

  来源: BID
  名称: 12108
  链接:http://www.securityfocus.com/bid/12108

  来源: GENTOO
  名称: GLSA-200501-02
  链接:http://www.gentoo.org/security/en/glsa/glsa-200501-02.xml

  来源: XF
  名称: gnu-a2ps-psmanupin-symlink(18672)
  链接:http://xforce.iss.net/xforce/xfdb/18672

  来源: XF
  名称: gnu-a2ps-fixpsin-symlink(18671)
  链接:http://xforce.iss.net/xforce/xfdb/18671

  来源: www.vuxml.org
  链接:http://www.vuxml.org/freebsd/9168253c-5a6d-11d9-a9e7-0001020eed82.html

  来源: SECUNIA
  名称: 13641
  链接:http://secunia.com/advisories/13641