CVE-2001-1002
published 2001-08-31CVE-2001-1002: The default configuration of the DVI print filter (dvips) in Red Hat Linux 7.0 and earlier does not run dvips in secure mode when dvips is executed by lpd…
PriorityP338high7.5CVSS 2.0
AVNACLAuNCPIPAP
EXPLOIT
EPSS
9.32%
94.8th percentile
The default configuration of the DVI print filter (dvips) in Red Hat Linux 7.0 and earlier does not run dvips in secure mode when dvips is executed by lpd, which could allow remote attackers to gain privileges by printing a DVI file that contains malicious commands.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| redhat | linux | — | — |
| redhat | linux | — | — |
| redhat | linux | — | — |
CVSS provenance
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
vendor_redhat7.5HIGH
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
security flaw
vendor_redhat·2001-08-27·CVSS 7.5
CVE-2001-1002 [HIGH] security flaw
security flaw
The default configuration of the DVI print filter (dvips) in Red Hat Linux 7.0 and earlier does not run dvips in secure mode when dvips is executed by lpd, which could allow remote attackers to gain privileges by printing a DVI file that contains malicious commands.
GHSA
GHSA-28fj-h7cm-23g6: The default configuration of the DVI print filter (dvips) in Red Hat Linux 7
ghsa_unreviewed·2022-04-30
CVE-2001-1002 [HIGH] GHSA-28fj-h7cm-23g6: The default configuration of the DVI print filter (dvips) in Red Hat Linux 7
The default configuration of the DVI print filter (dvips) in Red Hat Linux 7.0 and earlier does not run dvips in secure mode when dvips is executed by lpd, which could allow remote attackers to gain privileges by printing a DVI file that contains malicious commands.
No detection rules found.
http://marc.info/?l=bugtraq&m=99892644616749&w=2http://www.redhat.com/support/errata/RHSA-2001-102.htmlhttp://www.securityfocus.com/bid/3241https://exchange.xforce.ibmcloud.com/vulnerabilities/16509http://marc.info/?l=bugtraq&m=99892644616749&w=2http://www.redhat.com/support/errata/RHSA-2001-102.htmlhttp://www.securityfocus.com/bid/3241https://exchange.xforce.ibmcloud.com/vulnerabilities/16509
2001-08-31
Published