Description
dvips converter for Postscript files in the tetex package calls the system() function insecurely, which allows remote attackers to execute arbitrary commands via certain print jobs, possibly involving fonts.
References (11)
Core 11
Core References
Mailing List mailing-list
x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=103497852330838&w=2
Patch, Vendor Advisory vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/5978
Mailing List mailing-list
x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=104005975415582&w=2
Vendor Advisory vendor-advisory
x_refsource_conectiva
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000537
US Government Resource third-party-advisory
x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/169841
Patch, Vendor Advisory vendor-advisory
x_refsource_debian
http://www.debian.org/security/2002/dsa-207
Third Party Advisory, VDB Entry vendor-advisory
x_refsource_hp
http://www.securityfocus.com/advisories/4567
Vendor Advisory vendor-advisory
x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2002-195.html
Vendor Advisory vdb-entry
x_refsource_xf
http://www.iss.net/security_center/static/10365.php
Patch, Vendor Advisory vendor-advisory
x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2002-194.html
Various Sources vendor-advisory
x_refsource_mandrake
http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-070.php
Scores
EPSS
0.1301
EPSS Percentile
94.2%
Details
Status
published
Products (12)
hp/secure_os
1.0
mandrakesoft/mandrake_linux
7.2
mandrakesoft/mandrake_linux
8.0 (2 CPE variants)
mandrakesoft/mandrake_linux
8.1 (2 CPE variants)
mandrakesoft/mandrake_linux
8.2 (2 CPE variants)
mandrakesoft/mandrake_linux
9.0
redhat/linux
6.2 (4 CPE variants)
redhat/linux
7.0 (3 CPE variants)
redhat/linux
7.1 (4 CPE variants)
redhat/linux
7.2 (3 CPE variants)
... and 2 more
Published
Oct 28, 2002
Tracked Since
Feb 18, 2026