Unscored severity · published Jan 21, 2005
CVE-2004-1185
Enscript 1.6.3 does not sanitize filenames, which allows remote attackers or local users to execute arbitrary commands via crafted filenames
–
CVSS
4.4%
EPSS
No
On KEV
Description
Enscript 1.6.3 does not sanitize filenames, which allows remote attackers or local users to execute arbitrary commands via crafted filenames.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.4% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EN
Enscript · Gnu
1.3.0; 1.4.0; 1.5.0; 1.6.0; 1.6.1; 1.6.2; +1 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-1185
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-1185
lists.apple.com
http://lists.apple.com/archives/security-announce/2009/May/msg00002.html
secunia.com
http://secunia.com/advisories/35074
securitytracker.com
http://securitytracker.com/id?1012965
support.apple.com
http://support.apple.com/kb/HT3549
Patch
http://www.debian.org/security/2005/dsa-654
Patch
http://www.gentoo.org/security/en/glsa/glsa-200502-03.xml
More from Enscript
–
CVE-2008-3863
Stack-based buffer overflow in the read_special_escape function in src/psgen.c in GNU Enscript 1.6.1 and 1.6.4 beta, when the -e (aka special escapes processing) option is…
–
CVE-2004-1184
The EPSF pipe support in enscript 1.6.3 allows remote attackers or local users to execute arbitrary commands via shell metacharacters
–
CVE-2004-1186
Multiple buffer overflows in enscript 1.6.3 allow remote attackers or local users to cause a denial of service (application crash)
–
CVE-2002-0044
GNU Enscript 1.6.1 and earlier allows local users to overwrite arbitrary files of the Enscript user via a symlink attack on temporary files