NVD

Id
3725  
Name
CVE-2008-3863  
Description
Stack-based buffer overflow in the read_special_escape function in src/psgen.c in GNU Enscript 1.6.1 and 1.6.4 beta, when the -e (aka special escapes processing) option is enabled, allows user-assisted remote attackers to execute arbitrary code via a crafted ASCII file, related to the setfilename command.  
Reject
 
CVSS Version
2  
CVSS Score
7.6  
Severity
High  
CVSS Base Score
7.6  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-10-23  
Modified Date
2012-11-05  
Seq
2008-3863  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
23574 3725 CVE-2008-3863 APPLE-SA-2009-05-12  View
23575 3725 CVE-2008-3863 SUSE-SR:2008:024  View
23576 3725 CVE-2008-3863 oval:org.mitre.oval:def:9939  View
23577 3725 CVE-2008-3863 RHSA-2008:1021  View
23578 3725 CVE-2008-3863 GLSA-200812-02  View
23579 3725 CVE-2008-3863 4488  View
23580 3725 CVE-2008-3863 http://support.apple.com/kb/HT3549  View
23581 3725 CVE-2008-3863 http://support.avaya.com/elmodocs2/security/ASA-2008-504.htm  View
23582 3725 CVE-2008-3863 http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0321  View
23583 3725 CVE-2008-3863 DSA-1670  View
23584 3725 CVE-2008-3863 MDVSA-2008:243  View
23585 3725 CVE-2008-3863 RHSA-2008:1016  View
23586 3725 CVE-2008-3863 20081022 Secunia Research: GNU Enscript "setfilename" Special Escape Buffer Overflow  View
23587 3725 CVE-2008-3863 20081117 rPSA-2008-0321-1 enscript  View
23588 3725 CVE-2008-3863 31858  View
23589 3725 CVE-2008-3863 USN-660-1  View
23590 3725 CVE-2008-3863 TA09-133A  View
23591 3725 CVE-2008-3863 ADV-2008-2891  View
23592 3725 CVE-2008-3863 ADV-2009-1297  View
23593 3725 CVE-2008-3863 gnuenscript-readspecialescape-bo(46026)  View
23594 3725 CVE-2008-3863 https://issues.rpath.com/browse/RPL-2887  View
23595 3725 CVE-2008-3863 FEDORA-2008-9351  View
23596 3725 CVE-2008-3863 FEDORA-2008-9372  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46911 JVNDB-2008-002221 GNU Enscript の read_special_escape 関数におけるバッファオーバーフローの脆弱性 GNU Enscript の read_special_escape 関数には、-e オプションを使用可能にしている場合に ASCII ファイルの処理に不備があるため、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2008-3863 33976 CVE-2008-3863 3725 7.6 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002221.html 2008-10-23 2009-06-26 View