FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2004-1185

This CVE name corresponds to:

Entered	Topic
2005-02-11	enscript -- multiple vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2004-1185 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2004-1185
Phase	Assigned(20041213)

Description

Enscript 1.6.3 does not sanitize filenames, which allows remote attackers or local users to execute arbitrary commands via crafted filenames.

References

Source	Reference
BUGTRAQ	20060526 rPSA-2006-0083-1 enscript
CONFIRM	http://support.apple.com/kb/HT3549
APPLE	APPLE-SA-2009-05-12
DEBIAN	DSA-654
FEDORA	FLSA:152892
GENTOO	GLSA-200502-03
MANDRAKE	MDKSA-2005:033
REDHAT	RHSA-2005:040
UBUNTU	USN-68-1
CERT	TA09-133A
BID	12329
OVAL	oval:org.mitre.oval:def:10808
SECTRACK	1012965
SECUNIA	35074
VUPEN	ADV-2009-1297
XF	enscript-filename-command-execution(19029)