Description
The (1) pj-gs.sh, (2) ps2epsi, (3) pv.sh, and (4) sysvlp.sh scripts in the ESP Ghostscript (espgs) package in Trustix Secure Linux 1.5 through 2.1, and other operating systems, allow local users to overwrite files via a symlink attack on temporary files.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 3 | ghostscript +1 | 7.05-32.1.10 | RHSA-2005:081 |
| RHEL 3 | hpijs | 1.3-32.1.10 | RHSA-2005:081 |
Advisories 1
- RHSA-2005:081 Red Hat Security Advisory: ghostscript security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- oval:org.mitre.oval:def:10284 vdb-entry signature
- script-temporary-file-overwrite(17583) vdb-entry
- 19799 third-party-advisory
- 2004-0050 vendor-advisory
- 20056 third-party-advisory
- http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=136321
- 16997 third-party-advisory
- RHSA-2005:081 vendor-advisory
- 17135 third-party-advisory
- USN-3-1 vendor-advisory
- 11285 vdb-entry