193 matches found
CVE-2004-1184
The EPSF pipe support in enscript 1.6.3 allows remote attackers or local users to execute arbitrary commands via shell metacharacters...
CVE-2004-1184
CVE-2004-1184 affects enscript (notably version 1.6.3) where EPSF pipe support accepts shell metacharacters, enabling arbitrary command execution by remote attackers or local users. Technical details across OpenVAS/Nessus entries confirm the vulnerability and its association with enscript; remedi...
CVE-2004-1186
CVE-2004-1186 is tied to enscript 1.6.3 and is described in connected sources as involving multiple buffer overflows that can crash the program, enabling a DoS scenario. The related OpenVAS/Nessus entries show patches released for enscript (e.g., SLES9 security update for enscript) and list CVE-2...
CVE-2004-1185
Enscript 1.6.3 does not sanitize filenames, which allows remote attackers or local users to execute arbitrary commands via crafted filenames...
CVE-2004-1184
The EPSF pipe support in enscript 1.6.3 allows remote attackers or local users to execute arbitrary commands via shell metacharacters...
CVE-2004-1185
Enscript 1.6.3 does not sanitize filenames, which allows remote attackers or local users to execute arbitrary commands via crafted filenames...
CVE-2004-1186
Multiple buffer overflows in enscript 1.6.3 allow remote attackers or local users to cause a denial of service application crash...
Fedora Core 3 : enscript-1.6.1-28.0.2 (2005-016)
Erik Sjolund has discovered several security relevant problems in enscript, a program to converts ASCII text to Postscript and other formats. The Common Vulnerabilities and Exposures project identifies the following vulnerabilities : - CVE-2004-1184 Unsanitised input can causes the execution of...
Fedora Core 2 : enscript-1.6.1-25.2 (2005-015)
Erik Sjolund has discovered several security relevant problems in enscript, a program to converts ASCII text to Postscript and other formats. The Common Vulnerabilities and Exposures project identifies the following vulnerabilities : - CVE-2004-1184 Unsanitised input can causes the execution of...
Debian DSA-654-1 : enscript - several vulnerabilities
Erik Sjolund has discovered several security relevant problems in enscript, a program to convert ASCII text into Postscript and other formats. The Common Vulnerabilities and Exposures project identifies the following vulnerabilities : - CAN-2004-1184 Unsanitised input can cause the execution of...
USN-68-1: enscript vulnerabilities
Erik Sjölund discovered several vulnerabilities in enscript which could cause arbitrary code execution with the privileges of the user calling enscript. Quotes and other shell escape characters in titles and file names were not handled in previous versions. CAN-2004-1184 Previous versions support...
[SECURITY] [DSA 654-1] New enscript packages fix several vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 654-1 [email protected] http://www.debian.org/security/ Martin Schulze January 21st, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 654-1] New enscript packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 654-1 [email protected] http://www.debian.org/security/ Martin Schulze January 21st, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 654-1] New enscript packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 654-1 [email protected] http://www.debian.org/security/ Martin Schulze January 21st, 2005 http://www.debian.org/security/faq -...
CVE-2004-1184
The EPSF pipe support in enscript 1.6.3 allows remote attackers or local users to execute arbitrary commands via shell metacharacters...
CVE-2004-1184
The EPSF pipe support in enscript 1.6.3 allows remote attackers or local users to execute arbitrary commands via shell metacharacters...
CVE-2004-1185
Enscript 1.6.3 does not sanitize filenames, which allows remote attackers or local users to execute arbitrary commands via crafted filenames...
CVE-2004-1185
Enscript 1.6.3 does not sanitize filenames, which allows remote attackers or local users to execute arbitrary commands via crafted filenames...
