Untriaged
foomatic-rip filter v4.0.12 and prior used insecurely creates temporary files …
foomatic-rip filter v4.0.12 and prior used insecurely creates temporary files for storage of PostScript data by rendering the data when the debug mode was enabled. This flaw may be exploited by a local attacker to conduct symlink attacks by overwriting arbitrary files accessible with the privileges of the user running the foomatic-rip universal print filter.
References
- https://www.openwall.com/lists/oss-security/2014/02/08/5/1 x_refsource_MISC
- https://lwn.net/Articles/459979/ x_refsource_MISC
- https://launchpad.net/ubuntu/+source/foomatic-filters/4.0.12-1 x_refsource_MISC
- https://security-tracker.debian.org/tracker/CVE-2011-2924 x_refsource_MISC
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-2924 x_refsource_MISC
- https://access.redhat.com/security/cve/cve-2011-2924 x_refsource_MISC
- https://security-tracker.debian.org/tracker/CVE-2011-2924 x_refsource_MISC x_transferred
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-2924 x_refsource_MISC x_transferred
- https://access.redhat.com/security/cve/cve-2011-2924 x_refsource_MISC x_transferred
- https://www.openwall.com/lists/oss-security/2014/02/08/5/1 x_refsource_MISC x_transferred
- https://lwn.net/Articles/459979/ x_refsource_MISC x_transferred
- https://launchpad.net/ubuntu/+source/foomatic-filters/4.0.12-1 x_refsource_MISC x_transferred
- https://security-tracker.debian.org/tracker/CVE-2011-2924 x_refsource_MISC
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-2924 x_refsource_MISC
- https://access.redhat.com/security/cve/cve-2011-2924 x_refsource_MISC
- https://www.openwall.com/lists/oss-security/2014/02/08/5/1 x_refsource_MISC
- https://lwn.net/Articles/459979/ x_refsource_MISC
- https://launchpad.net/ubuntu/+source/foomatic-filters/4.0.12-1 x_refsource_MISC
- https://security-tracker.debian.org/tracker/CVE-2011-2924 x_refsource_MISC x_transferred
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-2924 x_refsource_MISC x_transferred
- https://access.redhat.com/security/cve/cve-2011-2924 x_refsource_MISC x_transferred
- https://www.openwall.com/lists/oss-security/2014/02/08/5/1 x_refsource_MISC x_transferred
- https://lwn.net/Articles/459979/ x_refsource_MISC x_transferred
- https://launchpad.net/ubuntu/+source/foomatic-filters/4.0.12-1 x_refsource_MISC x_transferred
Affected products
foomatic-filters
- ==4.0.12 and prior
Package maintainers
-
@7c6f434c Michael Raskin <7c6f434c@mail.ru>