CVE catalog

CVE-2009-5067

html2ps: CVE-2009-5067

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
7.63% · Oct 25, 2026

Directory traversal vulnerability in html2ps before 1.0b6 allows remote attackers to read arbitrary files via a .. (dot dot) in the "include file" SSI directive. NOTE: this issue only might be a vulnerability in limited scenarios, such as if html2ps is invoked by a web application, or if a user-assisted attacker provides filenames whose contents could cause a denial of service, such as certain devices.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianhtml2pssid1.0b7-7fixed
Debianhtml2psforky1.0b7-7fixed
Debianhtml2pstrixie1.0b7-6fixed
Debianhtml2psbookworm1.0b7-6fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianhtml2pssourcesid1.0b7-1lowNot reported[548633]
Debianhtml2pssourceforky1.0b7-1lowNot reported[548633]
Debianhtml2pssourcetrixie1.0b7-1lowNot reported[548633]
Debianhtml2pssourcebookworm1.0b7-1lowNot reported[548633]

[Debian bug #548633]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [html2ps]Fixed
    Details (2)

    • 1.0b7-6 · all · bookworm

      Fixed · Fixed: 1.0b7-1

      dsa · html2ps · debian · bookworm; dsa · html2ps · debian · 12

    • 1.0b7-6 · all · bookworm

      Fixed · Fixed: 1.0b7-1

      dsa · html2ps · debian · bookworm; dsa · html2ps · debian · 12

  • [xhtml2ps]Fixed

    Source package: [html2ps]

    Details (2)

    • 1.0b7-6 · all · bookworm

      Fixed · Fixed: 1.0b7-1

      dsa · html2ps · debian · bookworm; dsa · html2ps · debian · 12

    • 1.0b7-6 · all · bookworm

      Fixed · Fixed: 1.0b7-1

      dsa · html2ps · debian · bookworm; dsa · html2ps · debian · 12

[Debian 13 (Trixie)]

  • [html2ps]Fixed
    Details (2)

    • 1.0b7-6 · all · trixie

      Fixed · Fixed: 1.0b7-1

      dsa · html2ps · debian · 13

    • 1.0b7-6 · all · trixie

      Fixed · Fixed: 1.0b7-1

      dsa · html2ps · debian · 13

  • [xhtml2ps]Fixed

    Source package: [html2ps]

    Details (2)

    • 1.0b7-6 · all · trixie

      Fixed · Fixed: 1.0b7-1

      dsa · html2ps · debian · 13

    • 1.0b7-6 · all · trixie

      Fixed · Fixed: 1.0b7-1

      dsa · html2ps · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]