CVE-2004-1185

Published: Jan 21, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Enscript 1.6.3 does not sanitize filenames, which allows remote attackers or local users to execute arbitrary commands via crafted filenames.

Affected (7)

Products: Gnu: Enscript

Gnu

1 product

Enscript

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Gnu Enscript	Version 1.3.0
Gnu Enscript	Version 1.4.0
Gnu Enscript	Version 1.5.0
Gnu Enscript	Version 1.6.0
Gnu Enscript	Version 1.6.1
Gnu Enscript	Version 1.6.2
Gnu Enscript	Version 1.6.3

References (32)

http://lists.apple.com/archives/security-announce/2009/May/msg00002.html

Source: cve@mitre.org

http://secunia.com/advisories/35074

Source: cve@mitre.org

http://securitytracker.com/id?1012965

Source: cve@mitre.org

http://support.apple.com/kb/HT3549

Source: cve@mitre.org

http://www.debian.org/security/2005/dsa-654

Source: cve@mitre.org

PatchVendor Advisory

http://www.gentoo.org/security/en/glsa/glsa-200502-03.xml

Source: cve@mitre.org

Patch

http://www.mandriva.com/security/advisories?name=MDKSA-2005:033

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2005-040.html

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/419768/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/435199/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/12329

Source: cve@mitre.org

http://www.us-cert.gov/cas/techalerts/TA09-133A.html

Source: cve@mitre.org

US Government Resource

http://www.vupen.com/english/advisories/2009/1297

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/19029

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10808

Source: cve@mitre.org

https://usn.ubuntu.com/68-1/

Source: cve@mitre.org

http://lists.apple.com/archives/security-announce/2009/May/msg00002.html