CVE-2004-1184

Description (CNA)

The EPSF pipe support in enscript 1.6.3 allows remote attackers or local users to execute arbitrary commands via shell metacharacters.

Affected (CNA)

CWE

No CWE identifiers supplied.

References

• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9658
• http://www.securityfocus.com/archive/1/419768/100/0/threaded
• http://www.securityfocus.com/bid/12329
• http://support.apple.com/kb/HT3549
• http://www.mandriva.com/security/advisories?name=MDKSA-2005:033
• https://usn.ubuntu.com/68-1/
• http://securitytracker.com/id?1012965
• http://secunia.com/advisories/35074
• http://www.debian.org/security/2005/dsa-654
• http://lists.apple.com/archives/security-announce/2009/May/msg00002.html
• http://www.securityfocus.com/archive/1/435199/100/0/threaded
• http://www.us-cert.gov/cas/techalerts/TA09-133A.html
• http://www.vupen.com/english/advisories/2009/1297
• http://www.redhat.com/support/errata/RHSA-2005-040.html
• http://www.gentoo.org/security/en/glsa/glsa-200502-03.xml
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19012

ADP enrichment