CVE-2004-0967
The (1) pj-gs.sh, (2) ps2epsi, (3) pv.sh, and (4) sysvlp.sh scripts in the ESP Ghostscript (espgs...
CVE-2004-0967 is a high vulnerability (CVSS 7.2) in Aladdin Enterprises Ghostscript, published October 20, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.47%, the 41st percentile. Fixed in ghostscript 0:7.05-32.1.10.
- Severity
- 7.2 HighCVSS 2.0, NVD
- Exploit chance
- 0.47%EPSS, 41st percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
0:7.05-32.1.10ghostscript +15 more
Description
The (1) pj-gs.sh, (2) ps2epsi, (3) pv.sh, and (4) sysvlp.sh scripts in the ESP Ghostscript (espgs) package in Trustix Secure Linux 1.5 through 2.1, and other operating systems, allow local users to overwrite files via a symlink attack on temporary files.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ghostscriptRed Hat:enterprise_linux:3::as | before 0:7.05-32.1.10 | 0:7.05-32.1.10 |
ghostscript-debuginfoRed Hat:enterprise_linux:3::as | before 0:7.05-32.1.10 | 0:7.05-32.1.10 |
ghostscript-develRed Hat:enterprise_linux:3::as | before 0:7.05-32.1.10 | 0:7.05-32.1.10 |
hpijsRed Hat:enterprise_linux:3::as | before 0:1.3-32.1.10 | 0:1.3-32.1.10 |
ghostscriptRed Hat:enterprise_linux:3::desktop | before 0:7.05-32.1.10 | 0:7.05-32.1.10 |
ghostscript-debuginfoRed Hat:enterprise_linux:3::desktop | before 0:7.05-32.1.10 | 0:7.05-32.1.10 |
ghostscript-develRed Hat:enterprise_linux:3::desktop | before 0:7.05-32.1.10 | 0:7.05-32.1.10 |
hpijsRed Hat:enterprise_linux:3::desktop | before 0:1.3-32.1.10 | 0:1.3-32.1.10 |
ghostscriptRed Hat:enterprise_linux:3::es | before 0:7.05-32.1.10 | 0:7.05-32.1.10 |
ghostscript-debuginfoRed Hat:enterprise_linux:3::es | before 0:7.05-32.1.10 | 0:7.05-32.1.10 |
Show 6 moreShow less
| Package | Affected | Fixed |
|---|---|---|
ghostscript-develRed Hat:enterprise_linux:3::es | before 0:7.05-32.1.10 | 0:7.05-32.1.10 |
hpijsRed Hat:enterprise_linux:3::es | before 0:1.3-32.1.10 | 0:1.3-32.1.10 |
ghostscriptRed Hat:enterprise_linux:3::ws | before 0:7.05-32.1.10 | 0:7.05-32.1.10 |
ghostscript-debuginfoRed Hat:enterprise_linux:3::ws | before 0:7.05-32.1.10 | 0:7.05-32.1.10 |
ghostscript-develRed Hat:enterprise_linux:3::ws | before 0:7.05-32.1.10 | 0:7.05-32.1.10 |
hpijsRed Hat:enterprise_linux:3::ws | before 0:1.3-32.1.10 | 0:1.3-32.1.10 |
What each source reports
NVD Score used
The (1) pj-gs.sh, (2) ps2epsi, (3) pv.sh, and (4) sysvlp.sh scripts in the ESP Ghostscript (espgs) package in Trustix Secure Linux 1.5 through 2.1, and other operating systems, allow local users to overwrite files via a symlink attack on temporary files.
- Record
CVE-2004-0967- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-59
- Updated
- 2026-11-02
CVE ListNo score
The (1) pj-gs.sh, (2) ps2epsi, (3) pv.sh, and (4) sysvlp.sh scripts in the ESP Ghostscript (espgs) package in Trustix Secure Linux 1.5 through 2.1, and other operating systems, allow local users to overwrite files via a symlink attack on temporary files.
- Record
CVE-2004-0967- Updated
- 2026-11-02
EUVDEUVD-2004-0965No score
The (1) pj-gs.sh, (2) ps2epsi, (3) pv.sh, and (4) sysvlp.sh scripts in the ESP Ghostscript (espgs) package in Trustix Secure Linux 1.5 through 2.1, and other operating systems, allow local users to overwrite files via a symlink attack on temporary files.
- Record
EUVD-2004-0965- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jp9f-f85w-rv5vNo score
The (1) pj-gs.sh, (2) ps2epsi, (3) pv.sh, and (4) sysvlp.sh scripts in the ESP Ghostscript (espgs...
The (1) pj-gs.sh, (2) ps2epsi, (3) pv.sh, and (4) sysvlp.sh scripts in the ESP Ghostscript (espgs) package in Trustix Secure Linux 1.5 through 2.1, and other operating systems, allow local users to overwrite files via a symlink attack on temporary files.
- Record
GHSA-jp9f-f85w-rv5v- Weakness
- CWE-59
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10284
exchange.xforce.ibmcloud.com/vulnerabilities/17583
secunia.com/advisories/19799
trustix.org/errata/2004/0050
bugzilla.redhat.com/bugzilla/show_bug.cgi?id=136321
Show 14 moreShow less
redhat.com/support/errata/RHSA-2005-081.html
ubuntu.com/usn/usn-3-1
securityfocus.com/bid/11285
nvd.nist.gov/vuln/detail/CVE-2004-0967
github.com/advisories/GHSA-jp9f-f85w-rv5v
access.redhat.com/errata/RHSA-2005:081
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_081.json
cve.org/CVERecord?id=CVE-2004-0967