Summary
The remote host is missing an update to enscript
announced via advisory DSA 105-1.
Solution
https://secure1.securityspace.com/smysecure/catid.html?in=DSA%20105-1
Insight
The version of enscript (a tool to convert ASCII text to different formats) has been found to create temporary files insecurely.
This has been fixed in version 1.6.2-4.1 .
Severity
Classification
-
CVE CVE-2002-0044 -
CVSS Base Score: 3.6
AV:L/AC:L/Au:N/C:P/I:P/A:N
Related Vulnerabilities
- Debian Security Advisory DSA 2831-1 (puppet - insecure temporary files)
- Debian Security Advisory DSA 1086-1 (xmcd)
- Debian Security Advisory DSA 2661-1 (xorg-server - information disclosure)
- Debian Security Advisory DSA 2752-1 (phpbb3 - permissions too wide)
- Debian Security Advisory DSA 1947-1 (shibboleth-sp, shibboleth-sp2, opensaml2)