Red Hat Security AdvisoryRHSA-2008:1021
enscript security update
Released 2008-12-15 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 enscript-1.6.1-24.7, enscript-1.6.1-24.7.i386
- Red Hat Enterprise Linux AS (Advanced Server) version 2.1 enscript-1.6.1-16.7, enscript-1.6.1-16.7.i386, enscript-1.6.1-16.7.ia64
- Red Hat Enterprise Linux AS version 3 enscript-1.6.1-24.7, enscript-1.6.1-24.7.i386, enscript-1.6.1-24.7.ia64 +1
- Red Hat Enterprise Linux AS version 4 enscript-1.6.1-33.el4_7.1, enscript-1.6.1-33.el4_7.1.i386, enscript-1.6.1-33.el4_7.1.ia64 +1
- Red Hat Enterprise Linux Desktop version 4 enscript-1.6.1-33.el4_7.1, enscript-1.6.1-33.el4_7.1.i386
- Red Hat Enterprise Linux ES version 2.1 enscript-1.6.1-16.7, enscript-1.6.1-16.7.i386
- Red Hat Enterprise Linux ES version 3 enscript-1.6.1-24.7, enscript-1.6.1-24.7.i386, enscript-1.6.1-24.7.ia64
- Red Hat Enterprise Linux ES version 4 enscript-1.6.1-33.el4_7.1, enscript-1.6.1-33.el4_7.1.i386, enscript-1.6.1-33.el4_7.1.ia64
- Red Hat Enterprise Linux WS version 2.1 enscript-1.6.1-16.7, enscript-1.6.1-16.7.i386
- Red Hat Enterprise Linux WS version 3 enscript-1.6.1-24.7, enscript-1.6.1-24.7.i386, enscript-1.6.1-24.7.ia64
- Red Hat Enterprise Linux WS version 4 enscript-1.6.1-33.el4_7.1, enscript-1.6.1-33.el4_7.1.i386, enscript-1.6.1-33.el4_7.1.ia64
- Red Hat Linux Advanced Workstation 2.1 enscript-1.6.1-16.7, enscript-1.6.1-16.7.ia64
Fixes 3 records
Priority MEDIUM 45
Buffer overflow in enscript before 1.6.4 has unknown impact and attack vectors, possibly related to the font escape sequence.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.02436 · Published 2008-11-04 · Fixed CWE-119
Priority MEDIUM 44
Stack-based buffer overflow in the read_special_escape function in src/psgen.c in GNU Enscript 1.6.1 and 1.6.4 beta, when the -e (aka special escapes processing) option is enabled, allows user-assisted remote attackers t…
CVSS 2.0HIGH 7.6· Network · No auth · Interaction — · EPSS 0.08358 · Published 2008-10-23 · Fixed CWE-119
Priority LOW 36
Multiple buffer overflows in the (1) recognize_eps_file function (src/psgen.c) and (2) tilde_subst function (src/util.c) in GNU enscript 1.6.1, and possibly earlier, might allow remote attackers to execute arbitrary code…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.03086 · Published 2008-12-19 · Fixed CWE-119
THREATIST.IORead the docs