Lucene search
Ubuntu.comUB:CVE-2008-5078HistoryDec 19, 2008 - 12:00 a.m.
CVE-2008-5078
2008-12-1900:00:00
ubuntu.com
ubuntu.com
11
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.111 Low
EPSS
Percentile
95.2%
Multiple buffer overflows in the (1) recognize_eps_file function
(src/psgen.c) and (2) tilde_subst function (src/util.c) in GNU enscript
1.6.1, and possibly earlier, might allow remote attackers to execute
arbitrary code via an epsf escape sequence with a long filename.
Notes
| Author | Note |
|---|---|
| mdeslaur | flaws do not affect enscript 1.6.4 as per redhat bug |
Related
prion
prion
Buffer overflow
2008-12-19 17:30:00
nessus
nessus
SuSE9 Security Update : enscript (YOU Patch Number 12349)
2009-09-24 00:00:00
CentOS 3 / 4 : enscript (CESA-2008:1021)
2008-12-16 00:00:00
RHEL 2.1 / 3 / 4 : enscript (RHSA-2008:1021)
2008-12-16 00:00:00
openvas
openvas
SLES9: Security update for enscript
2009-10-10 00:00:00
SLES9: Security update for enscript
2009-10-10 00:00:00
RedHat Update for enscript RHSA-2008:1021-02
2009-03-06 00:00:00
debiancve
debiancve
CVE-2008-5078
2008-12-19 17:30:02
nvd
nvd
CVE-2008-5078
2008-12-19 17:30:02
cvelist
cvelist
CVE-2008-5078
2008-12-19 17:00:00
cve
cve
CVE-2008-5078
2008-12-19 17:30:02
oraclelinux
oraclelinux
enscript security update
2008-12-15 00:00:00
redhat
redhat
(RHSA-2008:1021) Moderate: enscript security update
2008-12-15 00:00:00
centos
centos
enscript security update
2008-12-15 16:57:26
enscript security update
2008-12-15 22:08:08
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.111 Low
EPSS
Percentile
95.2%
Related for UB:CVE-2008-5078