PT-2008-1044 · Gnu+1 · Gnu Enscript+1

Published 2008-10-23 · Updated 2024-06-15 · CVE-2008-3863

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions GNU Enscript versions 1.6.1 through 1.6.4 beta

Description The issue is related to a stack-based buffer overflow in the read special escape function in src/psgen.c, which can be exploited when the -e option is enabled. This allows user-assisted remote attackers to execute arbitrary code via a crafted ASCII file, related to the setfilename command. The vulnerability can lead to disruption of confidentiality, integrity, and availability of protected information and can be exploited remotely.

Recommendations For GNU Enscript versions 1.6.1 through 1.6.4 beta, consider disabling the -e option to prevent special escapes processing until a patch is available. As a temporary workaround, restrict the use of the read special escape function in src/psgen.c to minimize the risk of exploitation. Avoid using the setfilename command in crafted ASCII files until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2015-06169

BDU:2015-06170

BDU:2015-08453

BDU:2015-08454

CVE-2008-3863

DSA-1670-1

OPENSUSE-SU-2024:10737-1

RHSA-2008:1016

RHSA-2008:1021

RHSA-2008_1016

RHSA-2008_1021

Affected Products

Gnu Enscript

Red Hat

References · 49

• http://rhn.redhat.com/errata/RHSA-2008-1021.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2008-3863 · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200812-02.xml · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-06170 · Security Note
• http://secunia.com/advisories/32530 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2008-3863 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2008:243 · Vendor Advisory
• http://secunia.com/advisories/32137 · Vendor Advisory
• http://debian.org/security/2008/dsa-1670 · Vendor Advisory
• https://redhat.com/archives/fedora-package-announce/2008-November/msg00040.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00000.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2008-3863 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-08454 · Security Note
• https://bdu.fstec.ru/vul/2015-06169 · Security Note
• https://bdu.fstec.ru/vul/2015-08453 · Security Note