CVE-2004-1184
Fixed in a distro release EPSS 1%
The EPSF pipe support in enscript 1.6.3 allows remote attackers or local users to execute arbitrary commands via shell metacharacters.
Products: gnu enscript, sgi propack, redhat fedora_core, suse_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | enscript | 1.6.4-6 |
| Debian 13 | enscript | 1.6.4-6 |
| Debian 14 | enscript | 1.6.4-6 |
| Debian 3.0 | enscript | 1.6.3-1.3 |
| Red Hat Enterprise Linux 3 | enscript | 0:1.6.1-24.4 |
| Red Hat Enterprise Linux 3 | enscript-debuginfo | 0:1.6.1-24.4 |
| Red Hat Enterprise Linux 4 | enscript | 0:1.6.1-28.3 |
| Red Hat Enterprise Linux 4 | enscript-debuginfo | 0:1.6.1-28.3 |