NVD

Id
71574  
Name
CVE-2004-1185  
Description
Enscript 1.6.3 does not sanitize filenames, which allows remote attackers or local users to execute arbitrary commands via crafted filenames.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2005-01-21  
Modified Date
2017-07-10  
Seq
2004-1185  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
370245 71574 CVE-2004-1185 APPLE-SA-2009-05-12  View
370246 71574 CVE-2004-1185 oval:org.mitre.oval:def:10808  View
370247 71574 CVE-2004-1185 1012965  View
370248 71574 CVE-2004-1185 http://support.apple.com/kb/HT3549  View
370249 71574 CVE-2004-1185 DSA-654  View
370250 71574 CVE-2004-1185 GLSA-200502-03  View
370251 71574 CVE-2004-1185 MDKSA-2005:033  View
370252 71574 CVE-2004-1185 RHSA-2005:040  View
370253 71574 CVE-2004-1185 FLSA:152892  View
370254 71574 CVE-2004-1185 20060526 rPSA-2006-0083-1 enscript  View
370255 71574 CVE-2004-1185 12329  View
370256 71574 CVE-2004-1185 USN-68-1  View
370257 71574 CVE-2004-1185 TA09-133A  View
370258 71574 CVE-2004-1185 ADV-2009-1297  View
370259 71574 CVE-2004-1185 enscript-filename-command-execution(19029)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
61852 JVNDB-2005-000054 GNU enscript における不正なファイル名による任意のコマンドを実行される脆弱性 ------------ CVE-2004-1185 9612 CVE-2004-1185 71574 7.5 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000054.html 2005-01-21 2009-06-26 View