The (1) pj-gs.sh, (2) ps2epsi, (3) pv.sh, and (4) sysvlp.sh scripts in the ESP Ghostscript (espgs) package in Trustix Secure Linux 1.5 through 2.1, and other operating systems, allow local users to overwrite files via a symlink attack on temporary files.
The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ghostscript | Aladdin_enterprises | 4.3 (including) | 4.3 (including) |
| Ghostscript | Aladdin_enterprises | 4.3.2 (including) | 4.3.2 (including) |
| Ghostscript | Aladdin_enterprises | 5.10.10 (including) | 5.10.10 (including) |
| Ghostscript | Aladdin_enterprises | 5.10.10_1 (including) | 5.10.10_1 (including) |
| Ghostscript | Aladdin_enterprises | 5.10.12cl (including) | 5.10.12cl (including) |
| Ghostscript | Aladdin_enterprises | 5.10.15 (including) | 5.10.15 (including) |
| Ghostscript | Aladdin_enterprises | 5.10.16 (including) | 5.10.16 (including) |
| Ghostscript | Aladdin_enterprises | 5.10cl (including) | 5.10cl (including) |
| Ghostscript | Aladdin_enterprises | 5.50 (including) | 5.50 (including) |
| Ghostscript | Aladdin_enterprises | 5.50.8 (including) | 5.50.8 (including) |
| Ghostscript | Aladdin_enterprises | 5.50.8_7 (including) | 5.50.8_7 (including) |
| Ghostscript | Aladdin_enterprises | 6.51 (including) | 6.51 (including) |
| Ghostscript | Aladdin_enterprises | 6.52 (including) | 6.52 (including) |
| Ghostscript | Aladdin_enterprises | 6.53 (including) | 6.53 (including) |
| Ghostscript | Aladdin_enterprises | 7.0.4 (including) | 7.0.4 (including) |
| Ghostscript | Aladdin_enterprises | 7.0.5 (including) | 7.0.5 (including) |
| Ghostscript | Aladdin_enterprises | 7.0.6 (including) | 7.0.6 (including) |
| Ghostscript | Aladdin_enterprises | 7.0.7 (including) | 7.0.7 (including) |
| Red Hat Enterprise Linux 3 | RedHat | ghostscript-0:7.05-32.1.10 | * |
| Gs-common | Ubuntu | dapper | * |
| Gs-common | Ubuntu | edgy | * |
| Gs-common | Ubuntu | feisty | * |