Bug 144686

Summary:	CAN-2004-1184 multiple security issues in enscript (CAN-2004-1185 CAN-2004-1186)
Product:	Red Hat Enterprise Linux 4	Reporter:	Josh Bressers <bressers>
Component:	enscript	Assignee:	Tim Waugh <twaugh>
Status:	CLOSED ERRATA	QA Contact:	David Lawrence <dkl>
Severity:	low	Docs Contact:
Priority:	medium
Version:	4.0	CC:	security-response-team
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:	impact=low,embargo=20050120
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2005-02-15 09:19:30 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	142822

Description Josh Bressers 2005-01-10 17:42:19 UTC

*** This bug has been split off bug 144683 ***

------- Original comment by Josh Bressers (Security Response Team) on 2005.01.10
12:26 -------

This was reported to vendor-sec on 2004-01-07

Erik SjÃ¶lund has discovered several security relevant problems in
enscript, a program to converts ASCII text to Postscript and other
formats.  The Common Vulnerabilities and Exposures project identifies
the following vulnerabilities:

CAN-2004-1184

    Unsanitised input can caues the execution of arbitrary commands
    via EPSF pipe support.  This has been disabled, also upstream.

CAN-2004-1185

    Due to missing sanitising of filenames it is possible that a
    specially crafted filename can cause arbitrary commands to be
    executed.

CAN-2004-1186

    Multiple buffer overflows can cause the program to crash.

Comment 1 Mark J. Cox 2005-01-26 09:43:38 UTC

removing embargo

Comment 2 Tim Waugh 2005-01-26 10:38:02 UTC

RHSA-2005:040

Comment 3 Mark J. Cox 2005-02-15 09:19:30 UTC

An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on the solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.

http://rhn.redhat.com/errata/RHSA-2005-040.html