CVE-2001-1593
lowThe tempname_ensure function in lib/routines.h in a2ps 4.14 and earlier, as used by the spy_user function and possibly other functions, allows local users to m…
Vendor / product: Gnu — a2ps
The tempname_ensure function in lib/routines.h in a2ps 4.14 and earlier, as used by the spy_user function and possibly other functions, allows local users to modify arbitrary files via a symlink attack on a temporary file.
CVSS
2.1
2.1 (CVSS v2.0)
AV:L/AC:L/Au:N/C:N/I:P/A:N Severity source: NVD CVSS v2.0 (nvd@nist.gov)
Timeline (UTC)
Published: 2014-04-05 21:55
Modified: 2026-11-12 00:10
NVD status: Modified
Last synced 2 hours ago
Verified against the source API 2026-11-12 00:12 UTC
Exploitation
Not listed in CISA KEV (as of last catalog sync)
Absence from KEV does not mean a CVE is not exploited. Exploitation status: unknown (no authoritative evidence in our sources).
Affected products
gnu / a2ps ≤4.14, 4.10.3, 4.10.4, 4.12, 4.13, 4.13b
Weakness classification (CWE)
Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.
Mitigation & advisories
No vendor advisory or patch reference tagged by NVD. Check the references below.
References
- http://pkgs.fedoraproject.org/cgit/a2ps.git/plain/a2ps-4.13-security.patch cve@mitre.org
- http://seclists.org/oss-sec/2014/q1/237 cve@mitre.org
- http://seclists.org/oss-sec/2014/q1/253 cve@mitre.org
- http://seclists.org/oss-sec/2014/q1/257 cve@mitre.org
- http://www.debian.org/security/2014/dsa-2892 cve@mitre.org
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737385 cve@mitre.org
- https://bugzilla.redhat.com/show_bug.cgi?id=1060630 cve@mitre.org
- http://pkgs.fedoraproject.org/cgit/a2ps.git/plain/a2ps-4.13-security.patch af854a3a-2127-422b-91ae-364da2661108
- http://seclists.org/oss-sec/2014/q1/237 af854a3a-2127-422b-91ae-364da2661108
- http://seclists.org/oss-sec/2014/q1/253 af854a3a-2127-422b-91ae-364da2661108
- http://seclists.org/oss-sec/2014/q1/257 af854a3a-2127-422b-91ae-364da2661108
- http://www.debian.org/security/2014/dsa-2892 af854a3a-2127-422b-91ae-364da2661108
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737385 af854a3a-2127-422b-91ae-364da2661108
- https://bugzilla.redhat.com/show_bug.cgi?id=1060630 af854a3a-2127-422b-91ae-364da2661108
Data sources
NVD CVE API 2.0 — fetched 2026-11-12 00:12 UTC · record ↗