CVE-2004-1184: Medium severity gnu enscript vulnerability
Published Jan 21, 2005
·Updated
The EPSF pipe support in enscript 1.6.3 allows remote attackers or local users to execute arbitrary commands via shell metacharacters.
Affected Software
59 affected components
GNU Enscript=1.6.3
SGI ProPack=3.0
GNU Enscript=1.4
GNU Enscript=1.6.4
GNU Enscript=1.6.2
GNU Enscript=1.5
GNU Enscript=1.6.1
GNU Enscript=1.6
SUSE SuSE Linux=6.2
SUSE SuSE Linux=6.3
redhat Fedora Core=core_2.0
SUSE SuSE Linux=4.0
SUSE SuSE Linux=7.1
SUSE SuSE Linux=9.2
SUSE SuSE Linux=9.1
SUSE SuSE Linux=9.0
SUSE SuSE Linux=7.1-alpha
SUSE SuSE Linux=8.2
SUSE SuSE Linux=9.0
SUSE SuSE Linux=6.3-alpha
SUSE SuSE Linux=7.3
SUSE SuSE Linux=5.0
SUSE SuSE Linux=4.4.1
SUSE SuSE Linux=7.2
SUSE SuSE Linux=8.0
SUSE SuSE Linux=7.0
SUSE SuSE Linux=5.2
SUSE SuSE Linux=3.0
SUSE SuSE Linux=6.0
SUSE SuSE Linux=6.4
SUSE SuSE Linux=7.3
SUSE SuSE Linux=7.0
SUSE SuSE Linux=6.1-alpha
SUSE SuSE Linux=7.0
SUSE SuSE Linux=1.0
SUSE SuSE Linux=6.1
SUSE SuSE Linux=8.0
SUSE SuSE Linux=9.1
SUSE SuSE Linux=6.4
SUSE SuSE Linux=7.0-alpha
SUSE SuSE Linux=4.3
SUSE SuSE Linux=4.4
SUSE SuSE Linux=5.1
SUSE SuSE Linux=7.0
SUSE SuSE Linux=7.1
SUSE SuSE Linux=6.3
SUSE SuSE Linux=6.4
SUSE SuSE Linux=4.2
SUSE SuSE Linux=7.1
SUSE SuSE Linux=6.4-alpha
redhat Fedora Core=core_3.0
SUSE SuSE Linux=7.2
SUSE SuSE Linux=2.0
SUSE SuSE Linux=7.3
SUSE SuSE Linux=7.3
SUSE SuSE Linux=9.2
SUSE SuSE Linux=5.3
SUSE SuSE Linux=7.1
SUSE SuSE Linux=8.1
Remediation
Patch Available
Patch Available
Patch Available
Event History
Jan 21, 2005
CVE Published
05:00 AM
Jan 29, 2005
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-1184?
CVE-2004-1184 has been classified as a high severity vulnerability due to potential arbitrary command execution.
2
How do I fix CVE-2004-1184?
To fix CVE-2004-1184, update the GNU Enscript software to a version that is not affected by this vulnerability, particularly versions after 1.6.3.
3
Who is affected by CVE-2004-1184?
Users of GNU Enscript versions 1.4 through 1.6.3 are affected by CVE-2004-1184.
4
What impact does CVE-2004-1184 have on systems?
CVE-2004-1184 allows attackers to execute arbitrary commands on affected systems, posing a serious security risk.
5
Is CVE-2004-1184 a remote vulnerability?
Yes, CVE-2004-1184 can be exploited by both remote attackers and local users.