USN-3-1: GhostScript utility script vulnerabilities
Recently, Trustix Secure Linux discovered some vulnerabilities in the gs-common package. The utilities "pv.sh" and "ps2epsi" created temporary files in an insecure way, which allowed a symlink attack to create or overwrite arbitrary files with the privileges of the user invoking the program.
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-3-1?
The USN-3-1 vulnerability is considered to have a moderate severity due to the potential for local privilege escalation.
How do I fix USN-3-1?
To fix the USN-3-1 vulnerability, update the gs-common package to a patched version provided by your Linux distribution.
What systems are affected by USN-3-1?
USN-3-1 affects Ubuntu version 4.10 utilizing the gs-common package.
What type of attack does USN-3-1 expose systems to?
USN-3-1 exposes systems to symlink attacks that can lead to arbitrary file creation or overwriting.
Who discovered the USN-3-1 vulnerability?
The USN-3-1 vulnerability was discovered by Trustix Secure Linux.