CVE-2003-0136

Description

psbanner in the LPRng package allows local users to overwrite arbitrary files via a symbolic link attack on the /tmp/before file.

Affected products

• astart_technologies / lprng3.7.4 – 3.7.4
• astart_technologies / lprng3.8.9 – 3.8.9
• astart_technologies / lprng3.8.10.1 – 3.8.10.1
• astart_technologies / lprng3.8.19 – 3.8.19

References

• VENDOR_ADVISORYhttp://bugs.debian.org/cgi-bin/bugreport.cgi?archive=no&bug=188366
• MISChttp://www.redhat.com/support/errata/RHSA-2003-142.html
• VENDOR_ADVISORYhttp://www.debian.org/security/2003/dsa-285
• MISChttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A423