Vulnerability in Aladdin Enterprises Ghostscript
CVE-2001-1353
ghostscript before 6.51 allows local users to read and write arbitrary files as the 'lp' user via the file operator, even with -dSAFER enabled.
EPSS: 0.003 (24.1th percentile) — read the EPSS interpretation.
Affected products
- Aladdin_enterprises Ghostscript
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory, Patch, Vendor Advisory)
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (x_refsource_HP, vendor-advisory)
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory)