CVE-2011-2923

Name of the Vulnerable Software and Affected Versions foomatic-rip filter, all versions

Description The issue arises when the foomatic-rip filter is used insecurely, creating temporary files to store PostScript data while the debug mode is enabled. This can be exploited by a local attacker to conduct symlink attacks, allowing them to overwrite arbitrary files accessible with the privileges of the user running the foomatic-rip universal print filter.

Recommendations For all versions, consider disabling the debug mode to prevent the creation of temporary files that could be exploited for symlink attacks. As a temporary workaround, restrict access to the foomatic-rip filter to minimize the risk of exploitation.