CVE-2004-1184

Published: Jan 21, 2005Modified: Apr 16, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

The EPSF pipe support in enscript 1.6.3 allows remote attackers or local users to execute arbitrary commands via shell metacharacters.

Affected (59)

Products: Gnu: Enscript · Sgi: Propack · Redhat: Fedora Core · +1 more

Show all products

Gnu: Enscript · Sgi: Propack · Redhat: Fedora Core · Suse: Suse Linux

1 product

1 product

1 product

1 product

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Gnu Enscript	Version 1.4
Gnu Enscript	Version 1.5
Gnu Enscript	Version 1.6.1
Gnu Enscript	Version 1.6.2
Gnu Enscript	Version 1.6.3
Gnu Enscript	Version 1.6.4
Gnu Enscript	Version 1.6
Sgi Propack	Version 3.0

Configuration B

51 vulnerable

Vulnerable Software	Affected Versions
Redhat Fedora Core	Version core_2.0
Redhat Fedora Core	Version core_3.0
Suse Suse Linux	Version 1.0
Suse Suse Linux	Version 2.0
Suse Suse Linux	Version 3.0
Suse Suse Linux	Version 4.0
Suse Suse Linux	Version 4.2
Suse Suse Linux	Version 4.3
Suse Suse Linux	Version 4.4.1
Suse Suse Linux	Version 4.4
Suse Suse Linux	Version 5.0
Suse Suse Linux	Version 5.1
Suse Suse Linux	Version 5.2
Suse Suse Linux	Version 5.3
Suse Suse Linux	Version 6.0
Suse Suse Linux	Version 6.1
Suse Suse Linux	Version 6.1 alpha
Suse Suse Linux	Version 6.2
Suse Suse Linux	Version 6.3
Suse Suse Linux	Version 6.3
Suse Suse Linux	Version 6.3 alpha
Suse Suse Linux	Version 6.4
Suse Suse Linux	Version 6.4
Suse Suse Linux	Version 6.4
Suse Suse Linux	Version 6.4 alpha
Suse Suse Linux	Version 7.0
Suse Suse Linux	Version 7.0
Suse Suse Linux	Version 7.0
Suse Suse Linux	Version 7.0
Suse Suse Linux	Version 7.0 alpha
Suse Suse Linux	Version 7.1
Suse Suse Linux	Version 7.1
Suse Suse Linux	Version 7.1
Suse Suse Linux	Version 7.1
Suse Suse Linux	Version 7.1 alpha
Suse Suse Linux	Version 7.2
Suse Suse Linux	Version 7.2
Suse Suse Linux	Version 7.3
Suse Suse Linux	Version 7.3
Suse Suse Linux	Version 7.3
Suse Suse Linux	Version 7.3
Suse Suse Linux	Version 8.0
Suse Suse Linux	Version 8.0
Suse Suse Linux	Version 8.1
Suse Suse Linux	Version 8.2
Suse Suse Linux	Version 9.0
Suse Suse Linux	Version 9.0
Suse Suse Linux	Version 9.1
Suse Suse Linux	Version 9.1
Suse Suse Linux	Version 9.2
Suse Suse Linux	Version 9.2

References (32)

http://lists.apple.com/archives/security-announce/2009/May/msg00002.html

Source: cve@mitre.org

http://secunia.com/advisories/35074

Source: cve@mitre.org

http://securitytracker.com/id?1012965

Source: cve@mitre.org

http://support.apple.com/kb/HT3549

Source: cve@mitre.org

http://www.debian.org/security/2005/dsa-654

Source: cve@mitre.org

PatchVendor Advisory

http://www.gentoo.org/security/en/glsa/glsa-200502-03.xml

Source: cve@mitre.org

PatchVendor Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2005:033

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2005-040.html

Source: cve@mitre.org

PatchVendor Advisory

http://www.securityfocus.com/archive/1/419768/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/435199/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/12329

Source: cve@mitre.org

http://www.us-cert.gov/cas/techalerts/TA09-133A.html

Source: cve@mitre.org

US Government Resource

http://www.vupen.com/english/advisories/2009/1297

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/19012

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9658

Source: cve@mitre.org

https://usn.ubuntu.com/68-1/

Source: cve@mitre.org

http://lists.apple.com/archives/security-announce/2009/May/msg00002.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/35074

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1012965

Source: af854a3a-2127-422b-91ae-364da2661108

http://support.apple.com/kb/HT3549

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2005/dsa-654

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.gentoo.org/security/en/glsa/glsa-200502-03.xml

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2005:033

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2005-040.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.securityfocus.com/archive/1/419768/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/435199/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/12329

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.us-cert.gov/cas/techalerts/TA09-133A.html

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.vupen.com/english/advisories/2009/1297

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/19012

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9658

Source: af854a3a-2127-422b-91ae-364da2661108

https://usn.ubuntu.com/68-1/

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.