The (1) fixps (aka fixps.in) and (2) psmandup (aka psmandup.in) scripts in a2ps before 4.13 allow local users to overwrite arbitrary files via a symlink attack on temporary files.
| Name | Vendor | Start Version | End Version | 
|---|---|---|---|
| A2ps | Gnu | 4.13 (including) | 4.13 (including) | 
| A2ps | Gnu | 4.13b (including) | 4.13b (including) | 
| A2ps | Ubuntu | dapper | * | 
| A2ps | Ubuntu | devel | * | 
| A2ps | Ubuntu | edgy | * | 
| A2ps | Ubuntu | feisty | * |