CVE-2008-3863

Description

References

• lists.apple.com/archives/security-announce/2009/May/msg00002.html
• lists.opensuse.org/opensuse-security-announce/2008-11/msg00000.html
• rhn.redhat.com/errata/RHSA-2008-1021.html
• secunia.com/advisories/32137 · Vendor Advisory
• secunia.com/advisories/32521
• secunia.com/advisories/32530 · Vendor Advisory
• secunia.com/advisories/32753
• secunia.com/advisories/32854
• secunia.com/advisories/32970
• secunia.com/advisories/33109
• secunia.com/advisories/35074
• secunia.com/secunia_research/2008-41 · Vendor Advisory
• security.gentoo.org/glsa/glsa-200812-02.xml
• securityreason.com/securityalert/4488
• support.apple.com/kb/HT3549

enscript 的其他漏洞

• CVE-2004-1185高危 7.5Enscript 1.6.3 does not sanitize filenames, which allows remote attackers or local users to execute arbitrary commands via crafted filenames…
• CVE-2004-1184中危 4.6The EPSF pipe support in enscript 1.6.3 allows remote attackers or local users to execute arbitrary commands via shell metacharacters.
• CVE-2004-1186中危 5.0Multiple buffer overflows in enscript 1.6.3 allow remote attackers or local users to cause a denial of service (application crash).
• CVE-2002-0044低危 3.6GNU Enscript 1.6.1 and earlier allows local users to overwrite arbitrary files of the Enscript user via a symlink attack on temporary files.