CVE-2004-1185

Published: 21 January 2005

Enscript 1.6.3 does not sanitize filenames, which allows remote attackers or local users to execute arbitrary commands via crafted filenames.

Priority

Package	Release	Status
enscript Launchpad, Ubuntu, Debian	dapper	Released (1.6.4-7)
	edgy	Released (1.6.4-7)
	feisty	Released (1.6.4-7)
	upstream	Needs triage

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.