PT-2005-1131 · Gnu+2 · Enscript+2

Published 2005-01-21 · Updated 2018-10-19 · CVE-2004-1184

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions enscript version 1.6.3

Description The issue allows remote attackers or local users to execute arbitrary commands via shell metacharacters in the EPSF pipe support.

Recommendations For enscript version 1.6.3, consider restricting the use of the EPSF pipe support until a patch is available.

Fix

Related Identifiers

ALT-PU-2014-1700

CVE-2004-1184

DSA-654-1

RHSA-2005:039

RHSA-2005:040

RHSA-2005_039

RHSA-2005_040

Affected Products

Alt Linux

Red Hat

Enscript

References · 28

• https://usn.ubuntu.com/68-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2004-1184 · Vendor Advisory
• http://debian.org/security/2005/dsa-654 · Vendor Advisory
• http://gentoo.org/security/en/glsa/glsa-200502-03.xml · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2005:033 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1184 · Security Note
• http://lists.apple.com/archives/security-announce/2009/May/msg00002.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2005-040.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2004-1184 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-1184 · Security Note
• https://errata.altlinux.org/ALT-PU-2014-1700 · Vendor Advisory
• http://securityfocus.com/archive/1/419768/100/0/threaded · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2004-1184 · Vendor Advisory
• https://rhn.redhat.com/errata/RHSA-2005-039.html · Note
• http://support.apple.com/kb/HT3549 · Note