ghostscript before 6.51 allows local users to read and write arbitrary files as the lp user via the file operator, even with -dSAFER enabled.
Affected Software
Name |
Vendor |
Start Version |
End Version |
Ghostscript |
Aladdin_enterprises |
* |
6.51 (including) |
References