PT-2005-1131 · Gnu+2 · Enscript+2

Publicado 2005-01-21 · Atualizado 2018-10-19 · CVE-2004-1184

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions enscript version 1.6.3

Description The issue allows remote attackers or local users to execute arbitrary commands via shell metacharacters in the EPSF pipe support.

Recommendations For enscript version 1.6.3, consider restricting the use of the EPSF pipe support until a patch is available.

Correção

Identificadores relacionados

ALT-PU-2014-1700

CVE-2004-1184

DSA-654-1

RHSA-2005:039

RHSA-2005:040

RHSA-2005_039

RHSA-2005_040

Produtos afetados

Alt Linux

Red Hat

Enscript

Referências · 28

• https://usn.ubuntu.com/68-1 · Aviso do Fabricante
• https://rhn.redhat.com/errata/RHSA-2005-039.html · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2004-1184 · Aviso do Fabricante
• http://support.apple.com/kb/HT3549 · Nota
• http://debian.org/security/2005/dsa-654 · Aviso do Fabricante
• http://vupen.com/english/advisories/2009/1297 · Nota
• http://securityfocus.com/bid/12329 · Nota
• http://gentoo.org/security/en/glsa/glsa-200502-03.xml · Aviso do Fabricante
• http://mandriva.com/security/advisories?name=MDKSA-2005:033 · Aviso do Fabricante
• http://us-cert.gov/cas/techalerts/TA09-133A.html · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1184 · Nota de Segurança
• https://redhat.com/security/data/cve/CVE-2004-1186.html · Nota
• http://securityfocus.com/archive/1/435199/100/0/threaded · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19012 · Nota
• https://rhn.redhat.com/errata/RHSA-2005-040.html · Nota