Description
GNU Enscript 1.6.1 and earlier allows local users to overwrite arbitrary files of the Enscript user via a symlink attack on temporary files.
References
- HPSBTL0201-019 vendor-advisory
- 3920 vdb-entry
- RHSA-2002:012 vendor-advisory
- DSA-105 vendor-advisory
- gnu-enscript-tmpfile-symlink(7932) vdb-entry
- MDKSA-2002:010 vendor-advisory