CVE-2004-1185
Enscript 1.6.3 does not sanitize filenames, which allows remote attackers or local users to...
Enscript 1.6.3 does not sanitize filenames, which allows remote attackers or local users to execute arbitrary commands via crafted filenames.
Exploit likelihood
What each source reports
NVD Score used
Enscript 1.6.3 does not sanitize filenames, which allows remote attackers or local users to execute arbitrary commands via crafted filenames.
- Record
CVE-2004-1185- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Enscript 1.6.3 does not sanitize filenames, which allows remote attackers or local users to execute arbitrary commands via crafted filenames.
- Record
CVE-2004-1185- Updated
- 2026-11-02
EUVDEUVD-2004-1182 No score
Enscript 1.6.3 does not sanitize filenames, which allows remote attackers or local users to execute arbitrary commands via crafted filenames.
- Record
EUVD-2004-1182- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8xcw-4f7q-cw3g No score
Enscript 1.6.3 does not sanitize filenames, which allows remote attackers or local users to...
Enscript 1.6.3 does not sanitize filenames, which allows remote attackers or local users to execute arbitrary commands via crafted filenames.
- Record
GHSA-8xcw-4f7q-cw3g- Updated
- 2026-11-02
OSV No score
Enscript 1.6.3 does not sanitize filenames, which allows remote attackers or local users to execute arbitrary commands via crafted filenames.
- Record
CVE-2004-1185- Updated
- 2026-11-02
OSVDEBIAN-CVE-2004-1185 No score
Enscript 1.6.3 does not sanitize filenames, which allows remote attackers or local users to execute arbitrary commands via crafted filenames.
- Record
DEBIAN-CVE-2004-1185- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
enscriptDebian:12 |
before 1.6.4-6 | 1.6.4-6 |
enscriptDebian:13 |
before 1.6.4-6 | 1.6.4-6 |
enscriptDebian:14 |
before 1.6.4-6 | 1.6.4-6 |
enscriptDebian:3.0 From an advisory covering 3 CVEs |
before 1.6.3-1.3, plus listed versions 1.6.3-1.1 |
1.6.3-1.3 |
enscriptRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:1.6.1-24.4 | 0:1.6.1-24.4 |
enscript-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:1.6.1-24.4 | 0:1.6.1-24.4 |
enscriptRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:1.6.1-24.4 | 0:1.6.1-24.4 |
enscript-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:1.6.1-24.4 | 0:1.6.1-24.4 |
enscriptRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:1.6.1-24.4 | 0:1.6.1-24.4 |
enscript-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:1.6.1-24.4 | 0:1.6.1-24.4 |
Show 10 moreShow less
| Package | Affected | Fixed |
|---|---|---|
enscriptRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:1.6.1-24.4 | 0:1.6.1-24.4 |
enscript-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:1.6.1-24.4 | 0:1.6.1-24.4 |
enscriptRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:1.6.1-28.3 | 0:1.6.1-28.3 |
enscript-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:1.6.1-28.3 | 0:1.6.1-28.3 |
enscriptRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:1.6.1-28.3 | 0:1.6.1-28.3 |
enscript-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:1.6.1-28.3 | 0:1.6.1-28.3 |
enscriptRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:1.6.1-28.3 | 0:1.6.1-28.3 |
enscript-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:1.6.1-28.3 | 0:1.6.1-28.3 |
enscriptRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:1.6.1-28.3 | 0:1.6.1-28.3 |
enscript-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:1.6.1-28.3 | 0:1.6.1-28.3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-1185 is a high vulnerability (CVSS 7.5) in Gnu Enscript, published January 21, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.44%, the 91st percentile. Fixed in enscript 1.6.4-6.
References
securityfocus.com/archive/1/419768/100/0/threaded
support.apple.com/kb/HT3549
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10808
mandriva.com/security/advisories?name=MDKSA-2005:033
usn.ubuntu.com/68-1
Show 31 moreShow less
securitytracker.com/id?1012965
secunia.com/advisories/35074
debian.org/security/2005/dsa-654
lists.apple.com/archives/security-announce/2009/May/msg00002.html
exchange.xforce.ibmcloud.com/vulnerabilities/19029
us-cert.gov/cas/techalerts/TA09-133A.html
vupen.com/english/advisories/2009/1297
redhat.com/support/errata/RHSA-2005-040.html
gentoo.org/security/en/glsa/glsa-200502-03.xml
nvd.nist.gov/vuln/detail/CVE-2004-1185
github.com/advisories/GHSA-8xcw-4f7q-cw3g
security-tracker.debian.org/tracker/CVE-2004-1185
access.redhat.com/errata/RHSA-2005:039
bugzilla.redhat.com/show_bug.cgi?id=144683
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_039.json
cve.org/CVERecord?id=CVE-2004-1184