Approved changes feed: RSS · Atom

cpe:2.3:a:gnu:a2ps:4.13:*:*:*:*:*:*:*

part: a version: 4.13 update: *

VendorGnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9)
ProductA2Ps (38011b64-ed63-5497-9f4b-5642db78cbd1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/a2ps purl2cpe 2026-06-01 10:11:54.646179
pkg:deb/ubuntu/a2ps purl2cpe 2026-06-01 10:11:54.646181
pkg:github/akimd/a2ps purl2cpe 2026-06-01 10:11:54.646183
pkg:github/gitgnu/gnu_a2ps purl2cpe 2026-06-01 10:11:54.646184
pkg:github/gnu-mirror-unofficial/a2ps purl2cpe 2026-06-01 10:11:54.646186
pkg:gnu/a2ps purl2cpe 2026-06-01 10:11:54.646187
pkg:rpm/centos/a2ps purl2cpe 2026-06-01 10:11:54.646189
pkg:rpm/fedora/a2ps purl2cpe 2026-06-01 10:11:54.646191
pkg:rpm/opensuse/a2ps purl2cpe 2026-06-01 10:11:54.646192

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2004-1377 vulnerable 2026-06-08 04:47:53.886865 Details available
The (1) fixps (aka fixps.in) and (2) psmandup (aka psmandup.in) scripts in a2ps before 4.13 allow local users to overwrite arbitrary files via a symlink attack on temporary files.
Published: 2005-01-19T05:00:00.000Z
Updated: 2024-08-08T00:46:12.505Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1170 vulnerable 2026-06-08 04:47:53.193954 Details available
a2ps 4.13 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename.
Published: 2004-12-10T05:00:00.000Z
Updated: 2024-08-08T00:39:01.124Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-1593 vulnerable 2026-06-08 04:46:20.330726 Details available
The tempname_ensure function in lib/routines.h in a2ps 4.14 and earlier, as used by the spy_user function and possibly other functions, allows local users to modify arbitrary files via a symlink attack on a temporary file.
Published: 2014-04-05T21:00:00.000Z
Updated: 2024-08-08T04:58:11.469Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.