Back to search
CVE-2008-3863
Published: Oct 23, 2008
Modified: Aug 7, 2024
PUBLISHED
Description
Stack-based buffer overflow in the read_special_escape function in src/psgen.c in GNU Enscript 1.6.1 and 1.6.4 beta, when the -e (aka special escapes processing) option is enabled, allows user-assisted remote attackers to execute arbitrary code via a crafted ASCII file, related to the setfilename command.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
ADV-2008-2891
vdb-entry
x_refsource_VUPEN
32137
third-party-advisory
x_refsource_SECUNIA
gnuenscript-readspecialescape-bo(46026)
vdb-entry
x_refsource_XF
31858
vdb-entry
x_refsource_BID
32521
third-party-advisory
x_refsource_SECUNIA
http://support.apple.com/kb/HT3549
x_refsource_CONFIRM
SUSE-SR:2008:024
vendor-advisory
x_refsource_SUSE
FEDORA-2008-9372
vendor-advisory
x_refsource_FEDORA
oval:org.mitre.oval:def:9939
vdb-entry
signature
x_refsource_OVAL
FEDORA-2008-9351
vendor-advisory
x_refsource_FEDORA
RHSA-2008:1016
vendor-advisory
x_refsource_REDHAT
http://support.avaya.com/elmodocs2/security/ASA-2008-504.htm
x_refsource_CONFIRM
USN-660-1
vendor-advisory
x_refsource_UBUNTU
35074
third-party-advisory
x_refsource_SECUNIA
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0321
x_refsource_CONFIRM
4488
third-party-advisory
x_refsource_SREASON
APPLE-SA-2009-05-12
vendor-advisory
x_refsource_APPLE
GLSA-200812-02
vendor-advisory
x_refsource_GENTOO
20081022 Secunia Research: GNU Enscript "setfilename" Special Escape Buffer Overflow
mailing-list
x_refsource_BUGTRAQ
20081117 rPSA-2008-0321-1 enscript
mailing-list
x_refsource_BUGTRAQ
https://issues.rpath.com/browse/RPL-2887
x_refsource_CONFIRM
32854
third-party-advisory
x_refsource_SECUNIA
MDVSA-2008:243
vendor-advisory
x_refsource_MANDRIVA
32970
third-party-advisory
x_refsource_SECUNIA
32530
third-party-advisory
x_refsource_SECUNIA
DSA-1670
vendor-advisory
x_refsource_DEBIAN
TA09-133A
third-party-advisory
x_refsource_CERT
ADV-2009-1297
vdb-entry
x_refsource_VUPEN
http://secunia.com/secunia_research/2008-41/
x_refsource_MISC
32753
third-party-advisory
x_refsource_SECUNIA
33109
third-party-advisory
x_refsource_SECUNIA
RHSA-2008:1021
vendor-advisory
x_refsource_REDHAT
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now