Command Injection Vulnerability in Enscript by AFS

CVE-2004-1185

Summary

Enscript 1.6.3 lacks proper sanitization of filenames, which may allow remote attackers or local users to craft malicious filenames, subsequently executing arbitrary commands on the affected system. This flaw poses a significant security risk as it can lead to unauthorized access and control over the target system.

References