Command Injection Vulnerability in Enscript by AFS
CVE-2004-1185

Currently unrated

Key Information:

Vendor: Gnu
Status: Enscript
Vendor: CVE Published:; 21 January 2005

What is CVE-2004-1185?

Enscript 1.6.3 lacks proper sanitization of filenames, which may allow remote attackers or local users to craft malicious filenames, subsequently executing arbitrary commands on the affected system. This flaw poses a significant security risk as it can lead to unauthorized access and control over the target system.