CVE-2001-1353 : ghostscript before 6.51 allows local users to read and write arbitrary files as the 'lp' user via the file operator, eve

ghostscript before 6.51 allows local users to read and write arbitrary files as the 'lp' user via the file operator, even with -dSAFER enabled.

Published 2001-09-18 04:00:00

Updated 2016-10-18 02:14:39

Source MITRE

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2001-1353

Probability of exploitation activity in the next 30 days: 0.04%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 6 % EPSS Score History EPSS FAQ

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
2.6	LOW	AV:L/AC:H/Au:N/C:P/I:P/A:N	1.9	4.9	NIST
Access Vector: Local Access Complexity: High Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: None

Aladdin Enterprises » Ghostscript
Versions up to, including, (<=) 6.51
cpe:2.3:a:aladdin_enterprises:ghostscript:*:*:*:*:*:*:*:*
Matching versions