• info
• discussion
• exploit
• solution
• references

GNU Enscript Insecure Temporary File Creation Vulnerability

Solution:
Fixes available. Users of HP Secure Linux 1.0 are advised to upgrade the fixes supplied by Red Hat (listed below).


GNU Enscript 1.6.1

• Debian enscript_1.6.2-4.1_alpha.deb
  http://security.debian.org/dists/stable/updates/main/binary-alpha/ensc ript_1.6.2-4.1_alpha.deb


• Debian enscript_1.6.2-4.1_arm.deb
  http://security.debian.org/dists/stable/updates/main/binary-arm/enscri pt_1.6.2-4.1_arm.deb


• Debian enscript_1.6.2-4.1_i386.deb
  http://security.debian.org/dists/stable/updates/main/binary-i386/enscr ipt_1.6.2-4.1_i386.deb


• Debian enscript_1.6.2-4.1_m68k.deb
  http://security.debian.org/dists/stable/updates/main/binary-m68k/enscr ipt_1.6.2-4.1_m68k.deb


• Debian enscript_1.6.2-4.1_powerpc.deb
  http://security.debian.org/dists/stable/updates/main/binary-powerpc/en script_1.6.2-4.1_powerpc.deb


• Debian enscript_1.6.2-4.1_sparc.deb
  http://security.debian.org/dists/stable/updates/main/binary-sparc/ensc ript_1.6.2-4.1_sparc.deb


• MandrakeSoft enscript-1.6.1-22.1mdk.i586.rpm
  Release 1.0.1
  ftp://ftp-linux.cc.gatech.edu/pub/linux/distributions/mandrake/updates /1.0.1/RPMS/enscript-1.6.1-22.1mdk.i586.rpm


• MandrakeSoft enscript-1.6.1-22.1mdk.i586.rpm
  Release 7.1
  ftp://ftp-linux.cc.gatech.edu/pub/linux/distributions/mandrake/updates /7.1/RPMS/enscript-1.6.1-22.1mdk.i586.rpm


• MandrakeSoft enscript-1.6.1-22.1mdk.i586.rpm
  Release 7.2
  ftp://ftp-linux.cc.gatech.edu/pub/linux/distributions/mandrake/updates /7.2/RPMS/enscript-1.6.1-22.1mdk.i586.rpm


• MandrakeSoft enscript-1.6.1-22.1mdk.i586.rpm
  Release 8.0
  ftp://ftp-linux.cc.gatech.edu/pub/linux/distributions/mandrake/updates /8.0/RPMS/enscript-1.6.1-22.1mdk.i586.rpm


• MandrakeSoft enscript-1.6.1-22.1mdk.i586.rpm
  Release 8.1
  ftp://ftp-linux.cc.gatech.edu/pub/linux/distributions/mandrake/updates /8.1/RPMS/enscript-1.6.1-22.1mdk.i586.rpm


• MandrakeSoft enscript-1.6.1-22.1mdk.ia64.rpm
  Release 8.1
  ftp://ftp-linux.cc.gatech.edu/pub/linux/distributions/mandrake/updates /ia64/8.1/RPMS/enscript-1.6.1-22.1mdk.ia64.rpm


• MandrakeSoft enscript-1.6.1-22.1mdk.ppc.rpm
  Release 8.0
  ftp://ftp-linux.cc.gatech.edu/pub/linux/distributions/mandrake/updates /ppc/8.0/RPMS/enscript-1.6.1-22.1mdk.ppc.rpm


• Red Hat enscript-1.6.1-16.1.alpha.rpm
  Release 6.0
  ftp://updates.redhat.com/6.0/en/os/alpha/enscript-1.6.1-16.1.alpha.rpm


• Red Hat enscript-1.6.1-16.1.alpha.rpm
  Release 6.1
  ftp://updates.redhat.com/6.1/en/os/alpha/enscript-1.6.1-16.1.alpha.rpm


• Red Hat enscript-1.6.1-16.1.alpha.rpm
  Release 6.2
  ftp://updates.redhat.com/6.2/en/os/alpha/enscript-1.6.1-16.1.alpha.rpm


• Red Hat enscript-1.6.1-16.1.i386.rpm
  Release 6.0
  ftp://updates.redhat.com/6.0/en/os/i386/enscript-1.6.1-16.1.i386.rpm


• Red Hat enscript-1.6.1-16.1.i386.rpm
  Release 6.1
  ftp://updates.redhat.com/6.1/en/os/i386/enscript-1.6.1-16.1.i386.rpm


• Red Hat enscript-1.6.1-16.1.i386.rpm
  Release 6.2
  ftp://updates.redhat.com/6.2/en/os/i386/enscript-1.6.1-16.1.i386.rpm


• Red Hat enscript-1.6.1-16.1.sparc.rpm
  Release 6.0
  ftp://updates.redhat.com/6.0/en/os/sparc/enscript-1.6.1-16.1.sparc.rpm


• Red Hat enscript-1.6.1-16.1.sparc.rpm
  Release 6.1
  ftp://updates.redhat.com/6.1/en/os/sparc/enscript-1.6.1-16.1.sparc.rpm


• Red Hat enscript-1.6.1-16.1.sparc.rpm
  Release 6.2
  ftp://updates.redhat.com/6.2/en/os/sparc/enscript-1.6.1-16.1.sparc.rpm


• Red Hat enscript-1.6.1-16.2.alpha.rpm
  Release 7.0
  ftp://updates.redhat.com/7.0/en/os/alpha/enscript-1.6.1-16.2.alpha.rpm


• Red Hat enscript-1.6.1-16.2.alpha.rpm
  Release 7.1
  ftp://updates.redhat.com/7.1/en/os/alpha/enscript-1.6.1-16.2.alpha.rpm


• Red Hat enscript-1.6.1-16.2.i386.rpm
  Release 7.0
  ftp://updates.redhat.com/7.0/en/os/i386/enscript-1.6.1-16.2.i386.rpm


• Red Hat enscript-1.6.1-16.2.i386.rpm
  Release 7.1
  ftp://updates.redhat.com/7.1/en/os/i386/enscript-1.6.1-16.2.i386.rpm


• Red Hat enscript-1.6.1-16.2.i386.rpm
  Release 7.2
  ftp://updates.redhat.com/7.2/en/os/i386/enscript-1.6.1-16.2.i386.rpm


• Red Hat enscript-1.6.1-16.2.ia64.rpm
  Release 7.1
  ftp://updates.redhat.com/7.1/en/os/ia64/enscript-1.6.1-16.2.ia64.rpm


• Red Hat enscript-1.6.1-16.2.ia64.rpm
  Release 7.2
  ftp://updates.redhat.com/7.2/en/os/ia64/enscript-1.6.1-16.2.ia64.rpm