p PatchFirst

CVE-2011-2923

CVE-2011-2923

This page contains facts from public vulnerability sources. Check the original advisory before updating.

foomatic-rip filter, all versions, used insecurely creates temporary files for storage of PostScript data by rendering the data when the debug mode was enabled. This flaw may be exploited by a local attacker to conduct symlink attacks by overwriting arbitrary files accessible with the privileges of the user running the foomatic-rip universal print filter.

CVSS 5.5 · Medium · EPSS 0.4%

Published
Updated

Stack: system

Affected products and versions

  • foomatic-filters

    Versions
    • all versions: Affected

    No fix published

  • foomatic-filters Debian:12

    Versions
    • 4.0.17-16
    • 4.0.17-17
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • foomatic-filters Debian:13

    Versions
    • 4.0.17-16
    • 4.0.17-17
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • foomatic-filters Debian:14

    Versions
    • 4.0.17-16
    • 4.0.17-17
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →