Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2004-1185
HistoryJan 21, 2005 - 12:00 a.m.

CVE-2004-1185

2005-01-2100:00:00
ubuntu.com
ubuntu.com
9

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.017 Low

EPSS

Percentile

87.8%

JSON

Enscript 1.6.3 does not sanitize filenames, which allows remote attackers
or local users to execute arbitrary commands via crafted filenames.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchenscript< 1.6.4-7UNKNOWN
ubuntu6.10noarchenscript< 1.6.4-7UNKNOWN
ubuntu7.04noarchenscript< 1.6.4-7UNKNOWN

Related

cve 1
debiancve 1
openvas 11
debian 2
osv 1
gentoo 1
securityvulns 2
redhat 2
nessus 12
ubuntu 1
freebsd 1
cve
cve
CVE-2004-1185
2005-01-21 05:00:00
debiancve
debiancve
CVE-2004-1185
2005-01-21 05:00:00
openvas
openvas
Debian Security Advisory DSA 654-1 (enscript)
2008-01-17 00:00:00
SLES9: Security update for enscript
2009-10-10 00:00:00
Ubuntu: Security Advisory (USN-68-1)
2022-08-26 00:00:00
debian
debian
[SECURITY] [DSA 654-1] New enscript packages fix several vulnerabilities
2005-01-21 14:06:09
[SECURITY] [DSA 654-1] New enscript packages fix several vulnerabilities
2005-01-21 14:06:09
osv
osv
enscript - several
2005-01-21 00:00:00
gentoo
gentoo
enscript: Multiple vulnerabilities
2005-02-02 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 654-1] New enscript packages fix several vulnerabilities
2005-01-23 00:00:00
About the security content of Security Update 2009-002 / Mac OS X v10.5.7
2009-05-14 00:00:00
redhat
redhat
(RHSA-2005:039) enscript security update
2005-02-01 00:00:00
(RHSA-2005:040) enscript security update
2005-02-15 00:00:00
nessus
nessus
Fedora Core 2 : enscript-1.6.1-25.2 (2005-015)
2005-01-27 00:00:00
GLSA-200502-03 : enscript: Multiple vulnerabilities
2005-02-14 00:00:00
Ubuntu 4.10 : enscript vulnerabilities (USN-68-1)
2006-01-15 00:00:00
ubuntu
ubuntu
enscript vulnerabilities
2005-01-24 00:00:00
freebsd
freebsd
enscript -- multiple vulnerabilities
2005-02-02 00:00:00

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.017 Low

EPSS

Percentile

87.8%

JSON
Related for UB:CVE-2004-1185
cve1debiancve1openvas11debian2osv1gentoo1securityvulns2redhat2nessus12ubuntu1freebsd1