Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The tempname_ensure function in lib/routines.h in a2ps 4.14 and earlier, as used by the spy_user function and possibly other functions, allows local users to modify arbitrary files via a symlink attack on a temporary file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
GNU a2ps‘spy_user()’函数不安全临时文件创建漏洞
Vulnerability Description
PostScript是一种适用于电子产业和桌面出版领域的页面描述语言和编程语言。a2ps是GNU计划开发的一款支持将任何类型的文件转换为PostScript文件的软件包。 a2ps 4.14及之前版本中的lib/routines.h文件的‘tempname_ensure’函数存在安全漏洞，该漏洞源于spy_user函数使用不安全的临时文件。本地攻击者可通过对临时文件实施符号链接攻击利用该漏洞修改任意文件。
CVSS Information
N/A
Vulnerability Type
N/A