CVE-2001-1593: The tempname_ensure function in lib/routines.h in a2ps 4.14 and earlier, as used by the spy_user function a...

Security readout for executives and security teams

a2ps can create temporary files unsafely. On affected systems, a local user may be able to trick a2ps into writing through a symbolic link and modifying files they should not control. This is mainly a risk on shared Unix/Linux systems where untrusted users can run a2ps. Exposure is most likely on Linux or Unix systems with a2ps installed, especially multi-user hosts, shell servers, build systems, or print-processing environments. Single-user systems with no untrusted local access have lower practical exposure. Treat this as a local privilege-bound file integrity risk, not an internet-wide emergency. Prioritize shared servers and operational hosts where untrusted users have local access or where a2ps runs in automated workflows. Mitigation focus: Apply distribution security updates for a2ps where available.; Replace vulnerable a2ps 4.14 or earlier packages with fixed vendor builds.; Restrict local shell access on systems where a2ps remains vulnerable..

Prepared

Jun 14, 2026, 14:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.