Format string vulnerability in GNU a2ps 4.14 allows remote attackers to execute arbitrary code.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - a2ps: output_file() format string flaw (CVE-2015-8107)

  - The fixps script in a2ps 4.14 does not use the -dSAFER option when executing gs, which allows context-     dependent attackers to delete arbitrary files or execute arbitrary commands via a crafted PostScript file.
    (CVE-2014-0466)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - a2ps: output_file() format string flaw (CVE-2015-8107)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - a2ps: output_file() format string flaw (CVE-2015-8107)

  - The fixps script in a2ps 4.14 does not use the -dSAFER option when executing gs, which allows context-     dependent attackers to delete arbitrary files or execute arbitrary commands via a crafted PostScript file.
    (CVE-2014-0466)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

Jong-Gwon Kim reports :

When user runs a2ps with malicious crafted pro(a2ps prologue) file, an attacker can execute arbitrary code.

ID	Name	Product	Family	Severity
198679	RHEL 5 : a2ps (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
198619	RHEL 7 : a2ps (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
198592	RHEL 6 : a2ps (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
86999	FreeBSD : a2ps -- format string vulnerability (e359051d-90bd-11e5-bd18-002590263bf5)	Nessus	FreeBSD Local Security Checks	high

Detections

Analytics

CVE-2015-8107

high

Tenable Plugins

high

high

high

high