Aladdin Ghostscript File Read Vulnerability

Bugtraq ID:	3480
Class:	Environment Error
CVE:
Remote:	No
Local:	Yes
Published:	Sep 18 2001 12:00AM
Updated:	Sep 18 2001 12:00AM
Credit:	Discovered by Papowell <[email protected]> and publicized on the LPRNGLIST mailing list on September 18, 2001.
Vulnerable:	Aladdin Enterprises Ghostscript 5.50 + HP Secure OS software for Linux 1.0 + Redhat Linux 7.1 ia64 + Redhat Linux 7.1 ia64 + Redhat Linux 7.1 i386 + Redhat Linux 7.1 i386 + Redhat Linux 7.1 alpha + Redhat Linux 7.1 alpha + Redhat Linux 7.0 J i386 + Redhat Linux 7.0 J i386 + Redhat Linux 7.0 sparc + Redhat Linux 7.0 sparc + Redhat Linux 7.0 i386 + Redhat Linux 7.0 i386 + Redhat Linux 7.0 alpha + Redhat Linux 7.0 alpha + Redhat Linux 6.2 sparc + Redhat Linux 6.2 sparc + Redhat Linux 6.2 i386 + Redhat Linux 6.2 i386 + Redhat Linux 6.2 alpha + Redhat Linux 6.2 alpha Aladdin Enterprises Ghostscript 4.3 + HP Secure OS software for Linux 1.0 + Redhat Linux 5.2 sparc + Redhat Linux 5.2 sparc + Redhat Linux 5.2 i386 + Redhat Linux 5.2 i386 + Redhat Linux 5.2 alpha + Redhat Linux 5.2 alpha
Not Vulnerable:

Aladdin Ghostscript File Read Vulnerability

Solution:
Fixes available:


Aladdin Enterprises Ghostscript 4.3

• Red Hat Inc. 5.2 alpha ghostscript-4.03-4.alpha.rpm
  ftp://updates.redhat.com/5.2/en/os/alpha/ghostscript-4.03-4.alpha.rpm


• Red Hat Inc. 5.2 alpha rhs-printfilters-1.46-5.alpha.rpm
  ftp://updates.redhat.com/5.2/en/os/alpha/rhs-printfilters-1.46-5.alpha .rpm


• Red Hat Inc. 5.2 i386 ghostscript-4.03-4.i386.rpm
  ftp://updates.redhat.com/5.2/en/os/i386/ghostscript-4.03-4.i386.rpm


• Red Hat Inc. 5.2 i386 rhs-printfilters-1.46-5.i386.rpm
  ftp://updates.redhat.com/5.2/en/os/i386/rhs-printfilters-1.46-5.i386.r pm


• Red Hat Inc. 5.2 noarch printtool-3.29-4.noarch.rpm
  ftp://updates.redhat.com/5.2/en/os/noarch/printtool-3.29-4.noarch.rpm


• Red Hat Inc. 5.2 sparc ghostscript-4.03-4.sparc.rpm
  ftp://updates.redhat.com/5.2/en/os/sparc/ghostscript-4.03-4.sparc.rpm


• Red Hat Inc. 5.2 sparc rhs-printfilters-1.46-5.sparc.rpm
  ftp://updates.redhat.com/5.2/en/os/sparc/rhs-printfilters-1.46-5.sparc .rpm

Aladdin Enterprises Ghostscript 5.50

• Red Hat Inc. 6.2 alpha ghostscript-5.50-19.rh6.2.alpha.rpm
  ftp://updates.redhat.com/6.2/en/os/alpha/ghostscript-5.50-19.rh6.2.alp ha.rpm


• Red Hat Inc. 6.2 alpha rhs-printfilters-1.63-2.rh6.2.alpha.rpm
  ftp://updates.redhat.com/6.2/en/os/alpha/rhs-printfilters-1.63-2.rh6.2 .alpha.rpm


• Red Hat Inc. 6.2 i386 ghostscript-5.50-19.rh6.2.i386.rpm
  ftp://updates.redhat.com/6.2/en/os/i386/ghostscript-5.50-19.rh6.2.i386 .rpm


• Red Hat Inc. 6.2 i386 rhs-printfilters-1.63-2.rh6.2.i386.rpm
  ftp://updates.redhat.com/6.2/en/os/i386/rhs-printfilters-1.63-2.rh6.2. i386.rpm


• Red Hat Inc. 6.2 noarch printtool-3.44-2.noarch.rpm
  ftp://updates.redhat.com/6.2/en/os/noarch/printtool-3.44-2.noarch.rpm


• Red Hat Inc. 6.2 sparc ghostscript-5.50-19.rh6.2.sparc.rpm
  ftp://updates.redhat.com/6.2/en/os/sparc/ghostscript-5.50-19.rh6.2.spa rc.rpm


• Red Hat Inc. 6.2 sparc rhs-printfilters-1.63-2.rh6.2.sparc.rpm
  ftp://updates.redhat.com/6.2/en/os/sparc/rhs-printfilters-1.63-2.rh6.2 .sparc.rpm


• Red Hat Inc. 6.2J i386 ghostscript-5.50-19.rh6.2j.i386.rpm
  ftp://updates.redhat.com/6.2J/ja/os/i386/ghostscript-5.50-19.rh6.2j.i3 86.rpm


• Red Hat Inc. 6.2J i386 rhs-printfilters-1.63-2.rh6.2j.i386.rpm
  ftp://updates.redhat.com/6.2J/ja/os/i386/rhs-printfilters-1.63-2.rh6.2 j.i386.rpm


• Red Hat Inc. 6.2J noarch printtool-3.42-4.noarch.rpm
  ftp://updates.redhat.com/6.2J/ja/os/noarch/printtool-3.42-4.noarch.rpm


• Red Hat Inc. 7.0 alpha ghostscript-5.50-19.rh7.0.alpha.rpm
  ftp://updates.redhat.com/7.0/en/os/alpha/ghostscript-5.50-19.rh7.0.alp ha.rpm


• Red Hat Inc. 7.0 alpha rhs-printfilters-1.81-2.rh7.0.alpha.rpm
  ftp://updates.redhat.com/7.0/en/os/alpha/rhs-printfilters-1.81-2.rh7.0 .alpha.rpm


• Red Hat Inc. 7.0 i386 ghostscript-5.50-19.rh7.0.i386.rpm
  ftp://updates.redhat.com/7.0/en/os/i386/ghostscript-5.50-19.rh7.0.i386 .rpm


• Red Hat Inc. 7.0 i386 rhs-printfilters-1.81-2.rh7.0.i386.rpm
  ftp://updates.redhat.com/7.0/en/os/i386/rhs-printfilters-1.81-2.rh7.0. i386.rpm


• Red Hat Inc. 7.0 noarch printtool-3.54-2.noarch.rpm
  ftp://updates.redhat.com/7.0/en/os/noarch/printtool-3.54-2.noarch.rpm


• Red Hat Inc. 7.0J i386 rhs-printfilters-1.81-2.rh7.0j.i386.rpm
  ftp://updates.redhat.com/7.0J/ja/os/i386/rhs-printfilters-1.81-2.rh7.0 j.i386.rpm


• Red Hat Inc. 7.0J noarch printtool-3.54-2j.noarch.rpm
  ftp://updates.redhat.com/7.0J/ja/os/noarch/printtool-3.54-2j.noarch.rp m


• Red Hat Inc. 7.1 alpha ghostscript-5.50-19.rh7.1.alpha.rpm
  ftp://updates.redhat.com/7.1/en/os/alpha/ghostscript-5.50-19.rh7.1.alp ha.rpm


• Red Hat Inc. 7.1 alpha printconf-0.2.15-2.alpha.rpm
  ftp://updates.redhat.com/7.1/en/os/alpha/printconf-0.2.15-2.alpha.rpm


• Red Hat Inc. 7.1 alpha printconf-gui-0.2.15-2.alpha.rpm
  ftp://updates.redhat.com/7.1/en/os/alpha/printconf-gui-0.2.15-2.alpha. rpm


• Red Hat Inc. 7.1 i386 ghostscript-5.50-19.rh7.1.i386.rpm
  ftp://updates.redhat.com/7.1/en/os/i386/ghostscript-5.50-19.rh7.1.i386 .rpm


• Red Hat Inc. 7.1 i386 printconf-0.2.15-2.i386.rpm
  ftp://updates.redhat.com/7.1/en/os/i386/printconf-0.2.15-2.i386.rpm


• Red Hat Inc. 7.1 i386 printconf-gui-0.2.15-2.i386.rpm
  ftp://updates.redhat.com/7.1/en/os/i386/printconf-gui-0.2.15-2.i386.rp m


• Red Hat Inc. 7.1 ia64 ghostscript-5.50-19.rh7.1.ia64.rpm
  ftp://updates.redhat.com/7.1/en/os/ia64/ghostscript-5.50-19.rh7.1.ia64 .rpm


• Red Hat Inc. 7.1 ia64 printconf-0.2.15-2.ia64.rpm
  ftp://updates.redhat.com/7.1/en/os/ia64/printconf-0.2.15-2.ia64.rpm


• Red Hat Inc. 7.1 ia64 printconf-gui-0.2.15-2.ia64.rpm
  ftp://updates.redhat.com/7.1/en/os/ia64/printconf-gui-0.2.15-2.ia64.rp m