PT-2005-1132 · Gnu+1 · Enscript+1

Erik Sjolund · Published 2005-01-21 · Updated 2018-10-19 · CVE-2004-1185

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Enscript version 1.6.3

Description The issue allows remote attackers or local users to execute arbitrary commands via crafted filenames because Enscript 1.6.3 does not sanitize filenames.

Recommendations For Enscript version 1.6.3, consider implementing filename sanitization to prevent the execution of arbitrary commands. As a temporary workaround, restrict the ability to create or modify filenames to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2004-1185

DSA-654-1

RHSA-2005:039

RHSA-2005:040

RHSA-2005_039

RHSA-2005_040

Affected Products

Enscript

Red Hat

References · 25

• https://usn.ubuntu.com/68-1 · Vendor Advisory
• http://debian.org/security/2005/dsa-654 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2005:033 · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2009/May/msg00002.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2004-1185 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2005-040.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2004-1185 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2004-1185 · Vendor Advisory
• http://securityfocus.com/archive/1/419768/100/0/threaded · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-1185 · Security Note
• https://rhn.redhat.com/errata/RHSA-2005-039.html · Note
• http://support.apple.com/kb/HT3549 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19029 · Note
• http://vupen.com/english/advisories/2009/1297 · Note
• http://securityfocus.com/bid/12329 · Note