CVE-2001-1353: ghostscript before 6.51 allows local users to read and write arbitrary files as the 'lp' user via the file...

Security readout for executives and security teams

This is an old Ghostscript flaw where a local user could bypass the safer mode and read or write files using the permissions of the printing account, commonly lp. It is not shown as actively exploited in the provided sources, but it matters on legacy systems that still run Ghostscript before 6.51. Exposure is most likely on legacy Unix or Linux print-processing systems with Ghostscript before 6.51 installed, especially where local users can invoke Ghostscript or submit print jobs processed as lp. Modern environments are likely unaffected unless they retain old bundled Ghostscript packages. Treat this as a legacy exposure cleanup item unless old print servers remain in production. If vulnerable Ghostscript is found, prioritize remediation because local users could alter or read files through a trusted printing account. Mitigation focus: Upgrade Ghostscript to 6.51 or a vendor-fixed package.; Review the Red Hat and HP advisories for platform-specific package guidance.; Retire or isolate legacy systems that cannot be patched..

Prepared

Jul 1, 2026, 06:51 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.