CVE-2004-1185
Enscript 1.6.3 does not sanitize filenames, which allows remote attackers or local users to...
CVE-2004-1185 is a high vulnerability (CVSS 7.5) in Gnu Enscript, published January 21, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.44%, the 91st percentile. Fixed in enscript 1.6.4-6.
- Severity
- 7.5 HighCVSS 2.0, NVD
- Exploit chance
- 4.44%EPSS, 91st percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
1.6.4-6enscript +19 more
Description
Enscript 1.6.3 does not sanitize filenames, which allows remote attackers or local users to execute arbitrary commands via crafted filenames.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
enscriptDebian:12 | before 1.6.4-6 | 1.6.4-6 |
enscriptDebian:13 | before 1.6.4-6 | 1.6.4-6 |
enscriptDebian:14 | before 1.6.4-6 | 1.6.4-6 |
enscriptDebian:3.0 From an advisory covering 3 CVEs | before 1.6.3-1.3, plus listed versions 1.6.3-1.1 | 1.6.3-1.3 |
enscriptRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs | before 0:1.6.1-24.4 | 0:1.6.1-24.4 |
enscript-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs | before 0:1.6.1-24.4 | 0:1.6.1-24.4 |
enscriptRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs | before 0:1.6.1-24.4 | 0:1.6.1-24.4 |
enscript-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs | before 0:1.6.1-24.4 | 0:1.6.1-24.4 |
enscriptRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs | before 0:1.6.1-24.4 | 0:1.6.1-24.4 |
enscript-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs | before 0:1.6.1-24.4 | 0:1.6.1-24.4 |
Show 10 moreShow less
| Package | Affected | Fixed |
|---|---|---|
enscriptRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs | before 0:1.6.1-24.4 | 0:1.6.1-24.4 |
enscript-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs | before 0:1.6.1-24.4 | 0:1.6.1-24.4 |
enscriptRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs | before 0:1.6.1-28.3 | 0:1.6.1-28.3 |
enscript-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs | before 0:1.6.1-28.3 | 0:1.6.1-28.3 |
enscriptRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs | before 0:1.6.1-28.3 | 0:1.6.1-28.3 |
enscript-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs | before 0:1.6.1-28.3 | 0:1.6.1-28.3 |
enscriptRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs | before 0:1.6.1-28.3 | 0:1.6.1-28.3 |
enscript-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs | before 0:1.6.1-28.3 | 0:1.6.1-28.3 |
enscriptRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs | before 0:1.6.1-28.3 | 0:1.6.1-28.3 |
enscript-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs | before 0:1.6.1-28.3 | 0:1.6.1-28.3 |
What each source reports
NVD Score used
Enscript 1.6.3 does not sanitize filenames, which allows remote attackers or local users to execute arbitrary commands via crafted filenames.
- Record
CVE-2004-1185- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE ListNo score
Enscript 1.6.3 does not sanitize filenames, which allows remote attackers or local users to execute arbitrary commands via crafted filenames.
- Record
CVE-2004-1185- Updated
- 2026-11-02
EUVDEUVD-2004-1182No score
Enscript 1.6.3 does not sanitize filenames, which allows remote attackers or local users to execute arbitrary commands via crafted filenames.
- Record
EUVD-2004-1182- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8xcw-4f7q-cw3gNo score
Enscript 1.6.3 does not sanitize filenames, which allows remote attackers or local users to...
Enscript 1.6.3 does not sanitize filenames, which allows remote attackers or local users to execute arbitrary commands via crafted filenames.
- Record
GHSA-8xcw-4f7q-cw3g- Updated
- 2026-11-02
OSVNo score
Enscript 1.6.3 does not sanitize filenames, which allows remote attackers or local users to execute arbitrary commands via crafted filenames.
- Record
CVE-2004-1185- Updated
- 2026-11-02
OSVDEBIAN-CVE-2004-1185No score
Enscript 1.6.3 does not sanitize filenames, which allows remote attackers or local users to execute arbitrary commands via crafted filenames.
- Record
DEBIAN-CVE-2004-1185- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
securityfocus.com/archive/1/419768/100/0/threaded
support.apple.com/kb/HT3549
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10808
mandriva.com/security/advisories?name=MDKSA-2005:033
usn.ubuntu.com/68-1
Show 31 moreShow less
securitytracker.com/id?1012965
secunia.com/advisories/35074
debian.org/security/2005/dsa-654
lists.apple.com/archives/security-announce/2009/May/msg00002.html
exchange.xforce.ibmcloud.com/vulnerabilities/19029
us-cert.gov/cas/techalerts/TA09-133A.html
vupen.com/english/advisories/2009/1297
redhat.com/support/errata/RHSA-2005-040.html
gentoo.org/security/en/glsa/glsa-200502-03.xml
nvd.nist.gov/vuln/detail/CVE-2004-1185
github.com/advisories/GHSA-8xcw-4f7q-cw3g
security-tracker.debian.org/tracker/CVE-2004-1185
access.redhat.com/errata/RHSA-2005:039
bugzilla.redhat.com/show_bug.cgi?id=144683
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_039.json
cve.org/CVERecord?id=CVE-2004-1184