CVE-2004-1184 The EPSF pipe support in enscript 1.6.3 allows remote attackers or local users to execute arbitrary commands via shell metacharacters.
MediumCVSS 4.6
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The EPSF pipe support in enscript 1.6.3 allows remote attackers or local users to execute arbitrary commands via shell metacharacters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| GNU enscript | = 1.4 | No fix listed |
| GNU enscript | = 1.5 | No fix listed |
| GNU enscript | = 1.6 | No fix listed |
| GNU enscript | = 1.6.1 | No fix listed |
| GNU enscript | = 1.6.2 | No fix listed |
| GNU enscript | = 1.6.3 | No fix listed |
| GNU enscript | = 1.6.4 | No fix listed |
| sgi propack | = 3.0 | No fix listed |
| redhat fedora core | = core_2.0 | No fix listed |
| redhat fedora core | = core_3.0 | No fix listed |
| suse linux | = 1.0 | No fix listed |
| suse linux | = 2.0 | No fix listed |
| suse linux | = 3.0 | No fix listed |
| suse linux | = 4.0 | No fix listed |
| suse linux | = 4.2 | No fix listed |
| suse linux | = 4.3 | No fix listed |
| suse linux | = 4.4 | No fix listed |
| suse linux | = 4.4.1 | No fix listed |
| suse linux | = 5.0 | No fix listed |
| suse linux | = 5.1 | No fix listed |
| suse linux | = 5.2 | No fix listed |
| suse linux | = 5.3 | No fix listed |
| suse linux | = 6.0 | No fix listed |
| suse linux | = 6.1 | No fix listed |
| suse linux | = 6.1-alpha | No fix listed |
Show 20 more
| Product | Affected versions | Fixed in |
|---|---|---|
| suse linux | = 6.2 | No fix listed |
| suse linux | = 6.3 | No fix listed |
| suse linux | = 6.3-alpha | No fix listed |
| suse linux | = 6.4 | No fix listed |
| suse linux | = 6.4-alpha | No fix listed |
| suse linux | = 7.0 | No fix listed |
| suse linux | = 7.0-alpha | No fix listed |
| suse linux | = 7.1 | No fix listed |
| suse linux | = 7.1-alpha | No fix listed |
| suse linux | = 7.2 | No fix listed |
| suse linux | = 7.3 | No fix listed |
| suse linux | = 8.0 | No fix listed |
| suse linux | = 8.1 | No fix listed |
| suse linux | = 8.2 | No fix listed |
| suse linux | = 9.0 | No fix listed |
| suse linux | = 9.1 | No fix listed |
| suse linux | = 9.2 | No fix listed |
| debian/enscript(Debian:12) | < 1.6.4-6 | 1.6.4-6 |
| debian/enscript(Debian:13) | < 1.6.4-6 | 1.6.4-6 |
| debian/enscript(Debian:14) | < 1.6.4-6 | 1.6.4-6 |
References
- APPLE-SA-2009-05-12 vendor-advisory
- 35074 third-party-advisory
- 1012965 vdb-entry
- support.apple.com
- DSA-654 patch vendor-advisory
- GLSA-200502-03 patch vendor-advisory
- MDKSA-2005:033 vendor-advisory
- RHSA-2005:040 patch vendor-advisory
- FLSA:152892 vendor-advisory
- 20060526 rPSA-2006-0083-1 enscript mailing-list
- 12329 vdb-entry
- TA09-133A third-party-advisory us-government-resource
- ADV-2009-1297 vdb-entry
- enscript-epsf-command-ececution(19012) vdb-entry
- oval:org.mitre.oval:def:9658 signature vdb-entry
- USN-68-1 vendor-advisory
- Debian Security Tracker CVE-2004-1184 vendor-advisory