CVE-2008-3863

概要

参考情報

• lists.apple.com/archives/security-announce/2009/May/msg00002.html
• lists.opensuse.org/opensuse-security-announce/2008-11/msg00000.html
• rhn.redhat.com/errata/RHSA-2008-1021.html
• secunia.com/advisories/32137 · Vendor Advisory
• secunia.com/advisories/32521
• secunia.com/advisories/32530 · Vendor Advisory
• secunia.com/advisories/32753
• secunia.com/advisories/32854
• secunia.com/advisories/32970
• secunia.com/advisories/33109
• secunia.com/advisories/35074
• secunia.com/secunia_research/2008-41 · Vendor Advisory
• security.gentoo.org/glsa/glsa-200812-02.xml
• securityreason.com/securityalert/4488
• support.apple.com/kb/HT3549

enscript のその他の脆弱性

• CVE-2004-1185高 7.5Enscript 1.6.3 does not sanitize filenames, which allows remote attackers or local users to execute arbitrary commands via crafted filenames…
• CVE-2004-1184中 4.6The EPSF pipe support in enscript 1.6.3 allows remote attackers or local users to execute arbitrary commands via shell metacharacters.
• CVE-2004-1186中 5.0Multiple buffer overflows in enscript 1.6.3 allow remote attackers or local users to cause a denial of service (application crash).
• CVE-2002-0044低 3.6GNU Enscript 1.6.1 and earlier allows local users to overwrite arbitrary files of the Enscript user via a symlink attack on temporary files.