CVE-2007-6358: pdftops.pl before 1.20 in alternate pdftops filter allows local users to overwrite arbitrary files via a sy...

Security readout for executives and security teams

This is an old local file-overwrite flaw in the alternate pdftops filter. When CUPS or another caller feeds a PDF through stdin, pdftops.pl before 1.20 creates a predictable temporary file. A local user could redirect that write through a symlink. Business urgency depends on whether legacy Unix/Linux print stacks still use this filter. Exposure is most likely on legacy Linux or Unix systems with CUPS and the alternate pdftops filter package installed. Internet-facing exposure is not indicated. The attacker position described is local user access, so shared servers, multi-user workstations, and print servers deserve the closest review. Treat this as a legacy hygiene issue unless affected print servers are multi-user or still operational in sensitive environments. It is not described as remotely exploitable, but arbitrary local file overwrite can support disruption or privilege-impacting chains where old printing infrastructure remains unpatched. Mitigation focus: Inventory systems using alternate pdftops filter or pdftops.pl.; Update pdftops.pl to version 1.20 or vendor-fixed packages.; Review Ubuntu, Debian, Gentoo, and CUPS advisories for package-specific guidance..

Prepared

Jun 28, 2026, 19:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.