CVE-2001-1593
The tempname_ensure function in lib/routines.h in a2ps 4.14 and earlier, as used by the spy_user...
The tempname_ensure function in lib/routines.h in a2ps 4.14 and earlier, as used by the spy_user function and possibly other functions, allows local users to modify arbitrary files via a symlink attack on a temporary file.
Exploit likelihood
What each source reports
NVD Score used
The tempname_ensure function in lib/routines.h in a2ps 4.14 and earlier, as used by the spy_user function and possibly other functions, allows local users to modify arbitrary files via a symlink attack on a temporary file.
- Record
CVE-2001-1593- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:N/I:P/A:N - Weakness
- CWE-59
- Updated
- 2026-11-02
CVE List No score
The tempname_ensure function in lib/routines.h in a2ps 4.14 and earlier, as used by the spy_user function and possibly other functions, allows local users to modify arbitrary files via a symlink attack on a temporary file.
- Record
CVE-2001-1593- Updated
- 2026-11-02
EUVDEUVD-2001-1570 No score
The tempname_ensure function in lib/routines.h in a2ps 4.14 and earlier, as used by the spy_user function and possibly other functions, allows local users to modify arbitrary files via a symlink attack on a temporary file.
- Record
EUVD-2001-1570- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-q93q-4mxv-67mp No score
The tempname_ensure function in lib/routines.h in a2ps 4.14 and earlier, as used by the spy_user...
The tempname_ensure function in lib/routines.h in a2ps 4.14 and earlier, as used by the spy_user function and possibly other functions, allows local users to modify arbitrary files via a symlink attack on a temporary file.
- Record
GHSA-q93q-4mxv-67mp- Weakness
- CWE-59
- Updated
- 2026-11-02
OSV No score
The tempname_ensure function in lib/routines.h in a2ps 4.14 and earlier, as used by the spy_user function and possibly other functions, allows local users to modify arbitrary files via a symlink attack on a temporary file.
- Record
CVE-2001-1593- Updated
- 2026-11-02
OSVDEBIAN-CVE-2001-1593 No score
The tempname_ensure function in lib/routines.h in a2ps 4.14 and earlier, as used by the spy_user function and possibly other functions, allows local users to modify arbitrary files via a symlink attack on a temporary file.
- Record
DEBIAN-CVE-2001-1593- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:12797-1 No score
a2ps-4.15-1.1 on GA media
These are all security issues fixed in the a2ps-4.15-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:12797-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2001-1593 No score
Jakub Wilk found that a2ps, a tool to convert text and other types of files to PostScript, insecurely used a temporary file in spy_user(). A local attacker could use this flaw to perform a symbolic link attack to modify an arbitrary file accessible to the user running a2ps.
- Record
UBUNTU-CVE-2001-1593- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
a2psDebian:12 |
before 1:4.14-1.2 | 1:4.14-1.2 |
a2psDebian:13 |
before 1:4.14-1.2 | 1:4.14-1.2 |
a2psDebian:14 |
before 1:4.14-1.2 | 1:4.14-1.2 |
a2psDebian:6.0 |
before 1:4.14-1.1+deb6u1, plus listed versions 1:4.14-1.1 |
1:4.14-1.1+deb6u1 |
a2psDebian:7 |
before 1:4.14-1.1+deb7u1, plus listed versions 1:4.14-1.1 |
1:4.14-1.1+deb7u1 |
a2psopenSUSE:Tumbleweed |
before 4.15-1.1 | 4.15-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2001-1593 is a low vulnerability (CVSS 2.1) in Gnu A2ps, published March 31, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.40%, the 33rd percentile. Fixed in a2ps 1:4.14-1.2.