CVE-2004-1377: GNU a2ps

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

The (1) fixps (aka fixps.in) and (2) psmandup (aka psmandup.in) scripts in a2ps before 4.13 allow local users to overwrite arbitrary files via a symlink attack on temporary files.

Affected products

• GNU a2ps: version 4.13 only; version 4.13b only
• Turbolinux Turbolinux Home: any version
• Turbolinux Turbolinux Server: version 7.0 only; version 8.0 only
• Turbolinux Turbolinux Workstation: version 7.0 only; version 8.0 only

Published 2004-12-27. Last modified 2026-06-16.