Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
2.1

a2ps 4.14 and earlier: Local file modification via symbolic link attack

CVE-2001-1593 · published 12 years ago
Summary

A weakness in the a2ps software allows a local attacker to modify any file on the system by creating a symbolic link. This could be used to disrupt system operations or steal sensitive information. Update to the latest version of a2ps to fix this issue.

What to do
  • Update debian a2ps to version 1:4.14-1.2.
Affected software
Ecosystem VendorProductAffected versions
Debian:11 debian a2ps < 1:4.14-1.2
Fix: upgrade to 1:4.14-1.2
Debian:12 debian a2ps < 1:4.14-1.2
Fix: upgrade to 1:4.14-1.2
Debian:13 debian a2ps < 1:4.14-1.2
Fix: upgrade to 1:4.14-1.2
Debian:14 debian a2ps < 1:4.14-1.2
Fix: upgrade to 1:4.14-1.2
– gnu a2ps <= 4.14
4.10.3
4.10.4
4.12
4.13
4.13b
cpe:2.3:a:gnu:a2ps:*:*:*:*:*:*:*:*
Original advisory text
The tempname_ensure function in lib/routines.h in a2ps 4.14 and earlier, as used by the spy_user function and possibly other functions, allows local users to modify arbitrary files via a symlink at...
The tempname_ensure function in lib/routines.h in a2ps 4.14 and earlier, as used by the spy_user function and possibly other functions, allows local users to modify arbitrary files via a symlink attack on a temporary file.
References
Severity
2.1 Low
Exploitation
<1% chance of attack within 30 days
Type
CWE-59Link Following
Timeline
Published5 Apr 2014
Updated4 Nov 2026
First seen10 Apr 2026
Sources
CVE-2001-1593 · OSV
DEBIAN-CVE-2001-1593 · OSV
CVE-2001-1593 · NVD
Track software like this
Free during beta