CVEvulnerability
CVE-2004-1184
4.6 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2005-01-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Description
The EPSF pipe support in enscript 1.6.3 allows remote attackers or local users to execute arbitrary commands via shell metacharacters.
Affected configurations
• gnu enscript 1.4
• gnu enscript 1.5
• gnu enscript 1.6
• gnu enscript 1.6.1
• gnu enscript 1.6.2
• gnu enscript 1.6.3
• gnu enscript 1.6.4
• sgi propack 3.0
• redhat fedora core core 2.0
• redhat fedora core core 3.0
• suse suse linux 1.0
• suse suse linux 2.0
• suse suse linux 3.0
• suse suse linux 4.0
• suse suse linux 4.2
• suse suse linux 4.3
• suse suse linux 4.4
• suse suse linux 4.4.1
• suse suse linux 5.0
• suse suse linux 5.1
• suse suse linux 5.2
• suse suse linux 5.3
• suse suse linux 6.0
• suse suse linux 6.1
• suse suse linux 6.2
• suse suse linux 6.3
• suse suse linux 6.4
• suse suse linux 7.0
• suse suse linux 7.1
• suse suse linux 7.2
• suse suse linux 7.3
• suse suse linux 8.0
• suse suse linux 8.1
• suse suse linux 8.2
• suse suse linux 9.0
• suse suse linux 9.1
• suse suse linux 9.2
References
- http://lists.apple.com/archives/security-announce/2009/May/msg00002.html lists.apple.com
- http://secunia.com/advisories/35074 secunia.com
- http://securitytracker.com/id?1012965 securitytracker.com
- http://support.apple.com/kb/HT3549 support.apple.com
- http://www.debian.org/security/2005/dsa-654 Patch, Vendor Advisory
- http://www.gentoo.org/security/en/glsa/glsa-200502-03.xml Patch, Vendor Advisory
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:033 www.mandriva.com
- http://www.redhat.com/support/errata/RHSA-2005-040.html Patch, Vendor Advisory
- http://www.securityfocus.com/archive/1/419768/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/435199/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/12329 www.securityfocus.com
- http://www.us-cert.gov/cas/techalerts/TA09-133A.html US Government Resource
- http://www.vupen.com/english/advisories/2009/1297 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19012 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9658 oval.cisecurity.org
- https://usn.ubuntu.com/68-1/ usn.ubuntu.com
- http://lists.apple.com/archives/security-announce/2009/May/msg00002.html lists.apple.com
- http://secunia.com/advisories/35074 secunia.com
- http://securitytracker.com/id?1012965 securitytracker.com
- http://support.apple.com/kb/HT3549 support.apple.com
- http://www.debian.org/security/2005/dsa-654 Patch, Vendor Advisory
- http://www.gentoo.org/security/en/glsa/glsa-200502-03.xml Patch, Vendor Advisory
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:033 www.mandriva.com
- http://www.redhat.com/support/errata/RHSA-2005-040.html Patch, Vendor Advisory
- http://www.securityfocus.com/archive/1/419768/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/435199/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/12329 www.securityfocus.com
- http://www.us-cert.gov/cas/techalerts/TA09-133A.html US Government Resource
- http://www.vupen.com/english/advisories/2009/1297 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19012 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9658 oval.cisecurity.org
- https://usn.ubuntu.com/68-1/ usn.ubuntu.com