FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

enscript -- multiple vulnerabilities

Affected packages
enscript-a4 < 1.6.4_1
enscript-letter < 1.6.4_1
enscript-letterdj < 1.6.4_1


VuXML ID 72da8af6-7c75-11d9-8cc5-000854d03344
Discovery 2005-02-02
Entry 2005-02-11

Erik Sjölund discovered several issues in enscript: it suffers from several buffer overflows, quotes and shell escape characters are insufficiently sanitized in filenames, and it supported taking input from an arbitrary command pipe, with unwanted side effects.


CVE Name CVE-2004-1184
CVE Name CVE-2004-1185
CVE Name CVE-2004-1186