CVE-2004-1185

Description (CNA)

Enscript 1.6.3 does not sanitize filenames, which allows remote attackers or local users to execute arbitrary commands via crafted filenames.

Affected (CNA)

CWE

No CWE identifiers supplied.

References

• http://www.securityfocus.com/archive/1/419768/100/0/threaded
• http://www.securityfocus.com/bid/12329
• http://support.apple.com/kb/HT3549
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10808
• http://www.mandriva.com/security/advisories?name=MDKSA-2005:033
• https://usn.ubuntu.com/68-1/
• http://securitytracker.com/id?1012965
• http://secunia.com/advisories/35074
• http://www.debian.org/security/2005/dsa-654
• http://lists.apple.com/archives/security-announce/2009/May/msg00002.html
• http://www.securityfocus.com/archive/1/435199/100/0/threaded
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19029
• http://www.us-cert.gov/cas/techalerts/TA09-133A.html
• http://www.vupen.com/english/advisories/2009/1297
• http://www.redhat.com/support/errata/RHSA-2005-040.html
• http://www.gentoo.org/security/en/glsa/glsa-200502-03.xml

ADP enrichment