← Vulnerability feed

Vulnerability record · CVE-2004-1377 · published 27 December 2004

CVE-2004-1377: Gnu a2ps vulnerability

Gnu · A2ps

The (1) fixps (aka fixps.in) and (2) psmandup (aka psmandup.in) scripts in a2ps before 4.13 allow local users to overwrite arbitrary files via a symlink attack on temporary files.

2.1 CVSS 2.0 Low EPSS 0.36% · top 72.4%
2.1CVSS 2.0 base score
0.36%EPSS exploitation probability, 30 days
NoNot in CISA KEV
4Affected product versions listed by NVD
14References
16 Jun 2026Last modified by NVD

Description

The (1) fixps (aka fixps.in) and (2) psmandup (aka psmandup.in) scripts in a2ps before 4.13 allow local users to overwrite arbitrary files via a symlink attack on temporary files.

AV:L/AC:L/Au:N/C:N/I:P/A:N

Affected products

4 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://secunia.com/advisories/13641 Vendor Advisory
http://www.gentoo.org/security/en/glsa/glsa-200501-02.xml Patch
http://www.securityfocus.com/bid/12108 Patch
http://www.securityfocus.com/bid/12109 Patch
http://www.vuxml.org/freebsd/9168253c-5a6d-11d9-a9e7-0001020eed82.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/18671
https://exchange.xforce.ibmcloud.com/vulnerabilities/18672
http://secunia.com/advisories/13641 Vendor Advisory
http://www.gentoo.org/security/en/glsa/glsa-200501-02.xml Patch
http://www.securityfocus.com/bid/12108 Patch
http://www.securityfocus.com/bid/12109 Patch
http://www.vuxml.org/freebsd/9168253c-5a6d-11d9-a9e7-0001020eed82.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/18671
https://exchange.xforce.ibmcloud.com/vulnerabilities/18672

Track CVE-2004-1377 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2005-3625Easy software products cups vulnerabilityXpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of servic…EPSS 3.8%10.0CVE-2004-1170Gnu a2ps vulnerabilitya2ps 4.13 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename.EPSS 16%10.0CVE-2003-0694Sendmail prescan buffer overflow allows remote code executionThe prescan function in Sendmail 8.12.9 contains a buffer overflow reachable through crafted email addresses, as demonstrated via the parseaddr funct…EPSS 66%analysed7.8CVE-2015-8107Gnu a2ps vulnerabilityFormat string vulnerability in GNU a2ps 4.14 allows remote attackers to execute arbitrary code.EPSS 2.9%7.5CVE-2004-1175Midnight commander vulnerabilityfish.c in midnight commander allows remote attackers to execute arbitrary programs via "insecure filename quoting," possibly using shell metacharacte…EPSS 1.6%7.5CVE-2004-1004Midnight commander vulnerabilityMultiple format string vulnerabilities in Midnight Commander (mc) 4.5.55 and earlier allow remote attackers to have an unknown impact.EPSS 1.6%7.5CVE-2004-1176Midnight commander vulnerabilityBuffer underflow in extfs.c in Midnight Commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service and possibly execute a…EPSS 3.1%7.5CVE-2004-1005Midnight commander vulnerabilityMultiple buffer overflows in Midnight Commander (mc) 4.5.55 and earlier allow remote attackers to have an unknown impact.EPSS 1.8%

Source: NIST National Vulnerability Database (record CVE-2004-1377), CISA KEV, FIRST EPSS (scores of 2026-10-01). This page is refreshed as NVD updates the record.