CVE-2007-6358

pdftops.pl before 1.20 in alternate pdftops filter allows local users to overwrite arbitrary files via a symlink attack on the pdfin.[PID].tmp temporary file, which is created when pdftops reads a PDF file from stdin, such as when pdftops is invoked by CUPS.

Link	Resource
https://bugs.gentoo.org/show_bug.cgi?id=201042	Exploit
http://www.cups.org/articles.php?L515
http://www.debian.org/security/2007/dsa-1437
http://www.gentoo.org/security/en/glsa/glsa-200712-14.xml
http://www.securityfocus.com/bid/26919
http://secunia.com/advisories/28139	Vendor Advisory
http://secunia.com/advisories/28113	Vendor Advisory
http://secunia.com/advisories/28200	Vendor Advisory
http://www.ubuntu.com/usn/usn-563-1
http://secunia.com/advisories/28386	Vendor Advisory
http://osvdb.org/42029

Configuration 1

cpe:2.3:a:glyph_and_cog:pdftops:*:*:*:*:*:*:*:*

---

Published : 2007-12-15 01:46

Updated : 2017-11-16 02:29

---

NVD link : CVE-2007-6358

Mitre link : CVE-2007-6358

No products.

NVD-CWE-Other