CVE-2004-1184
The EPSF pipe support in enscript 1.6.3 allows remote attackers or local users to execute...
CVE-2004-1184 is a medium vulnerability (CVSS 4.6) in Gnu Enscript, published January 21, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.18%, the 67th percentile. Fixed in enscript 1.6.4-6.
The EPSF pipe support in enscript 1.6.3 allows remote attackers or local users to execute arbitrary commands via shell metacharacters.
Exploit likelihood
What each source reports
NVD Score used
4.6
The EPSF pipe support in enscript 1.6.3 allows remote attackers or local users to execute arbitrary commands via shell metacharacters.
- Record
CVE-2004-1184- CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
The EPSF pipe support in enscript 1.6.3 allows remote attackers or local users to execute arbitrary commands via shell metacharacters.
- Record
CVE-2004-1184- Updated
- 2026-11-02
EUVDEUVD-2004-1181 No score
The EPSF pipe support in enscript 1.6.3 allows remote attackers or local users to execute arbitrary commands via shell metacharacters.
- Record
EUVD-2004-1181- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-m3q3-jjv2-53w5 No score
The EPSF pipe support in enscript 1.6.3 allows remote attackers or local users to execute...
The EPSF pipe support in enscript 1.6.3 allows remote attackers or local users to execute arbitrary commands via shell metacharacters.
- Record
GHSA-m3q3-jjv2-53w5- Updated
- 2026-11-02
OSV No score
The EPSF pipe support in enscript 1.6.3 allows remote attackers or local users to execute arbitrary commands via shell metacharacters.
- Record
CVE-2004-1184- Updated
- 2026-11-02
OSVDEBIAN-CVE-2004-1184 No score
The EPSF pipe support in enscript 1.6.3 allows remote attackers or local users to execute arbitrary commands via shell metacharacters.
- Record
DEBIAN-CVE-2004-1184- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
enscriptDebian:12 |
before 1.6.4-6 | 1.6.4-6 |
enscriptDebian:13 |
before 1.6.4-6 | 1.6.4-6 |
enscriptDebian:14 |
before 1.6.4-6 | 1.6.4-6 |
enscriptDebian:3.0 |
before 1.6.3-1.3, plus listed versions 1.6.3-1.1 |
1.6.3-1.3 |
enscriptRed Hat:enterprise_linux:3::as |
before 0:1.6.1-24.4 | 0:1.6.1-24.4 |
enscript-debuginfoRed Hat:enterprise_linux:3::as |
before 0:1.6.1-24.4 | 0:1.6.1-24.4 |
enscriptRed Hat:enterprise_linux:3::desktop |
before 0:1.6.1-24.4 | 0:1.6.1-24.4 |
enscript-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:1.6.1-24.4 | 0:1.6.1-24.4 |
enscriptRed Hat:enterprise_linux:3::es |
before 0:1.6.1-24.4 | 0:1.6.1-24.4 |
enscript-debuginfoRed Hat:enterprise_linux:3::es |
before 0:1.6.1-24.4 | 0:1.6.1-24.4 |
Show 10 moreShow less
| Package | Affected | Fixed |
|---|---|---|
enscriptRed Hat:enterprise_linux:3::ws |
before 0:1.6.1-24.4 | 0:1.6.1-24.4 |
enscript-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:1.6.1-24.4 | 0:1.6.1-24.4 |
enscriptRed Hat:enterprise_linux:4::as |
before 0:1.6.1-28.3 | 0:1.6.1-28.3 |
enscript-debuginfoRed Hat:enterprise_linux:4::as |
before 0:1.6.1-28.3 | 0:1.6.1-28.3 |
enscriptRed Hat:enterprise_linux:4::desktop |
before 0:1.6.1-28.3 | 0:1.6.1-28.3 |
enscript-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:1.6.1-28.3 | 0:1.6.1-28.3 |
enscriptRed Hat:enterprise_linux:4::es |
before 0:1.6.1-28.3 | 0:1.6.1-28.3 |
enscript-debuginfoRed Hat:enterprise_linux:4::es |
before 0:1.6.1-28.3 | 0:1.6.1-28.3 |
enscriptRed Hat:enterprise_linux:4::ws |
before 0:1.6.1-28.3 | 0:1.6.1-28.3 |
enscript-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:1.6.1-28.3 | 0:1.6.1-28.3 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9658
securityfocus.com/archive/1/419768/100/0/threaded
securityfocus.com/bid/12329
support.apple.com/kb/HT3549
mandriva.com/security/advisories?name=MDKSA-2005:033
usn.ubuntu.com/68-1
Show 31 moreShow less
securitytracker.com/id?1012965
secunia.com/advisories/35074
debian.org/security/2005/dsa-654
lists.apple.com/archives/security-announce/2009/May/msg00002.html
securityfocus.com/archive/1/435199/100/0/threaded
us-cert.gov/cas/techalerts/TA09-133A.html
vupen.com/english/advisories/2009/1297
redhat.com/support/errata/RHSA-2005-040.html
gentoo.org/security/en/glsa/glsa-200502-03.xml
exchange.xforce.ibmcloud.com/vulnerabilities/19012
nvd.nist.gov/vuln/detail/CVE-2004-1184
github.com/advisories/GHSA-m3q3-jjv2-53w5
security-tracker.debian.org/tracker/CVE-2004-1184
access.redhat.com/errata/RHSA-2005:039
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=144683
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_039.json
access.redhat.com/security/cve/CVE-2004-1184
bugzilla.redhat.com/show_bug.cgi?id=1617391
cve.org/CVERecord?id=CVE-2004-1184
access.redhat.com/security/cve/CVE-2004-1185
bugzilla.redhat.com/show_bug.cgi?id=1617392
cve.org/CVERecord?id=CVE-2004-1185
nvd.nist.gov/vuln/detail/CVE-2004-1185
access.redhat.com/security/cve/CVE-2004-1186
bugzilla.redhat.com/show_bug.cgi?id=1617393
cve.org/CVERecord?id=CVE-2004-1186
nvd.nist.gov/vuln/detail/CVE-2004-1186
access.redhat.com/errata/RHSA-2005:040
bugzilla.redhat.com/show_bug.cgi?id=144686
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_040.json