ghostscript before 6.51 allows local users to read and write arbitrary files as the lp user via the file operator, even with -dSAFER enabled.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Ghostscript | Aladdin_enterprises | * | 6.51 (including) |
Red Hat Linux 7.2 | RedHat | * |