CVE Vulnerabilities

CVE-2004-1184

Published: Jan 21, 2005 | Modified: Oct 19, 2018
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4.6 MEDIUM
AV:L/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

The EPSF pipe support in enscript 1.6.3 allows remote attackers or local users to execute arbitrary commands via shell metacharacters.

Affected Software

Name Vendor Start Version End Version
Enscript Gnu 1.4 1.4
Enscript Gnu 1.5 1.5
Enscript Gnu 1.6 1.6
Enscript Gnu 1.6.1 1.6.1
Enscript Gnu 1.6.2 1.6.2
Enscript Gnu 1.6.3 1.6.3
Enscript Gnu 1.6.4 1.6.4
Propack Sgi 3.0 3.0
Red Hat Enterprise Linux 3 RedHat enscript-0:1.6.1-24.4 *
Red Hat Enterprise Linux 4 RedHat enscript-0:1.6.1-28.3 *
Enscript Ubuntu dapper *
Enscript Ubuntu devel *
Enscript Ubuntu edgy *
Enscript Ubuntu feisty *

References