enscript -- multiple vulnerabilities

2005-02-0200:00:00

vuxml.freebsd.org

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.023 Low

EPSS

Percentile

89.6%

JSON

Erik Sjölund discovered several issues in enscript:
it suffers from several buffer overflows, quotes and shell
escape characters are insufficiently sanitized in filenames,
and it supported taking input from an arbitrary command
pipe, with unwanted side effects.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchenscript-a4< 1.6.4_1UNKNOWN
FreeBSDanynoarchenscript-letter< 1.6.4_1UNKNOWN
FreeBSDanynoarchenscript-letterdj< 1.6.4_1UNKNOWN