CVE-2000-1162: ghostscript before 5.10-16 allows local users to overwrite files of other users via a symlink attack.

Security readout for executives and security teams

CVE-2000-1162 is an old Ghostscript local file-overwrite flaw. On systems running Ghostscript before 5.10-16, a local user could abuse symlinks to overwrite files belonging to other users. The sources do not provide CVSS, detailed affected package data, or evidence of active exploitation. Exposure is limited to hosts that still run Ghostscript versions before 5.10-16, especially legacy Linux systems based on affected vendor packages. Modern managed systems are unlikely exposed unless old packages or embedded systems remain in service. Treat this as a legacy hygiene issue unless old shared-user systems are present. It is not listed as known exploited in the bundle, but affected versions could let an insider or compromised local account damage another user's files. Mitigation focus: Upgrade Ghostscript to 5.10-16 or a later vendor-supported package.; Prioritize legacy systems matching the 2000 Linux vendor advisories.; If patch status is unclear, check current vendor package guidance before making assumptions..

Prepared

Jul 1, 2026, 09:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.