CVEvulnerability

CVE-2004-0967

7.2 HIGH Published 2005-02-09 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-02-09
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-59

Description

The (1) pj-gs.sh, (2) ps2epsi, (3) pv.sh, and (4) sysvlp.sh scripts in the ESP Ghostscript (espgs) package in Trustix Secure Linux 1.5 through 2.1, and other operating systems, allow local users to overwrite files via a symlink attack on temporary files.

Affected configurations

• aladdin enterprises ghostscript 4.3 • aladdin enterprises ghostscript 4.3.2 • aladdin enterprises ghostscript 5.10.10 • aladdin enterprises ghostscript 5.10.10 1 • aladdin enterprises ghostscript 5.10.12cl • aladdin enterprises ghostscript 5.10.15 • aladdin enterprises ghostscript 5.10.16 • aladdin enterprises ghostscript 5.10cl • aladdin enterprises ghostscript 5.50 • aladdin enterprises ghostscript 5.50.8 • aladdin enterprises ghostscript 5.50.8 7 • aladdin enterprises ghostscript 6.51 • aladdin enterprises ghostscript 6.52 • aladdin enterprises ghostscript 6.53 • aladdin enterprises ghostscript 7.0.4 • aladdin enterprises ghostscript 7.0.5 • aladdin enterprises ghostscript 7.0.6 • aladdin enterprises ghostscript 7.0.7

Related

Weakness · CWE (1)

  • CWE-59 Improper Link Resolution Before File Access weakness

References