Unscored severity · published Jan 21, 2005
CVE-2004-1184
The EPSF pipe support in enscript 1.6.3 allows remote attackers or local users to execute arbitrary commands via shell metacharacters
–
CVSS
1.2%
EPSS
No
On KEV
Description
The EPSF pipe support in enscript 1.6.3 allows remote attackers or local users to execute arbitrary commands via shell metacharacters.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 68% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EN
Enscript · Gnu
1.4; 1.5; 1.6; 1.6.1; 1.6.2; 1.6.3; +1 more · source: NVD
FC
Fedora Core · Redhat
core_2.0; core_3.0 · source: NVD
PR
Propack · Sgi
3.0 · source: NVD
SL
Suse Linux · Suse
1.0; 2.0; 3.0; 4.0; 4.2; 4.3; +34 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-1184
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-1184
lists.apple.com
http://lists.apple.com/archives/security-announce/2009/May/msg00002.html
secunia.com
http://secunia.com/advisories/35074
securitytracker.com
http://securitytracker.com/id?1012965
support.apple.com
http://support.apple.com/kb/HT3549
Patch
http://www.debian.org/security/2005/dsa-654
Patch
http://www.gentoo.org/security/en/glsa/glsa-200502-03.xml
More from Enscript
–
CVE-2008-3863
Stack-based buffer overflow in the read_special_escape function in src/psgen.c in GNU Enscript 1.6.1 and 1.6.4 beta, when the -e (aka special escapes processing) option is…
–
CVE-2004-1185
Enscript 1.6.3 does not sanitize filenames, which allows remote attackers or local users to execute arbitrary commands via crafted filenames
–
CVE-2004-1186
Multiple buffer overflows in enscript 1.6.3 allow remote attackers or local users to cause a denial of service (application crash)
–
CVE-2002-0044
GNU Enscript 1.6.1 and earlier allows local users to overwrite arbitrary files of the Enscript user via a symlink attack on temporary files