CVE-2004-1185

Enscript 1.6.3 does not sanitize filenames, which allows remote attackers or local users to execute arbitrary commands via crafted filenames.

• http://lists.apple.com/archives/security-announce/2009/May/msg00002.html
• http://secunia.com/advisories/35074
• http://securitytracker.com/id?1012965
• http://support.apple.com/kb/HT3549
• http://www.debian.org/security/2005/dsa-654Patch, Vendor Advisory
• http://www.gentoo.org/security/en/glsa/glsa-200502-03.xmlPatch
• http://www.mandriva.com/security/advisories?name=MDKSA-2005:033
• http://www.redhat.com/support/errata/RHSA-2005-040.html
• http://www.securityfocus.com/archive/1/419768/100/0/threaded
• http://www.securityfocus.com/archive/1/435199/100/0/threaded
• http://www.securityfocus.com/bid/12329
• http://www.us-cert.gov/cas/techalerts/TA09-133A.htmlUS Government Resource
• http://www.vupen.com/english/advisories/2009/1297
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19029
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10808
• https://usn.ubuntu.com/68-1/
• http://lists.apple.com/archives/security-announce/2009/May/msg00002.html
• http://secunia.com/advisories/35074
• http://securitytracker.com/id?1012965
• http://support.apple.com/kb/HT3549
• http://www.debian.org/security/2005/dsa-654Patch, Vendor Advisory
• http://www.gentoo.org/security/en/glsa/glsa-200502-03.xmlPatch
• http://www.mandriva.com/security/advisories?name=MDKSA-2005:033
• http://www.redhat.com/support/errata/RHSA-2005-040.html
• http://www.securityfocus.com/archive/1/419768/100/0/threaded
• http://www.securityfocus.com/archive/1/435199/100/0/threaded
• http://www.securityfocus.com/bid/12329
• http://www.us-cert.gov/cas/techalerts/TA09-133A.htmlUS Government Resource
• http://www.vupen.com/english/advisories/2009/1297
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19029
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10808
• https://usn.ubuntu.com/68-1/

Published

Jan 21, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-1179The debstd script in debmake 3.6.x before 3.6.10 and 3.7.x b…
• CVE-2004-1180Unknown vulnerability in the rwho daemon (rwhod) before 0.17…
• CVE-2004-1181htmlheadline before 21.8 allows local users to overwrite arb…
• CVE-2004-1182hfaxd in HylaFAX before 4.2.1, when installed with a "weak" …
• CVE-2004-1183Integer overflow in the tiffdump utility for libtiff 3.7.1 a…
• CVE-2004-1184The EPSF pipe support in enscript 1.6.3 allows remote attack…
• CVE-2004-1186Multiple buffer overflows in enscript 1.6.3 allow remote att…
• CVE-2004-1187Heap-based buffer overflow in the pnm_get_chunk function for…
• CVE-2004-1188The pnm_get_chunk function in xine 0.99.2 and earlier, and o…
• CVE-2004-1189The add_to_history function in svr_principal.c in libkadm5sr…
• CVE-2004-1190SUSE Linux before 9.1 and SUSE Linux Enterprise Server befor…
• CVE-2004-1191Race condition in SuSE Linux 8.1 through 9.2, when run on SM…