National Cyber-Alert System

Vulnerability Summary for CVE-2008-3863

Overview

Stack-based buffer overflow in the read_special_escape function in src/psgen.c in GNU Enscript 1.6.1 and 1.6.4 beta, when the -e (aka special escapes processing) option is enabled, allows user-assisted remote attackers to execute arbitrary code via a crafted ASCII file, related to the setfilename command.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

US-CERT Technical Alert: TA09-133A

Name: TA09-133A

Hyperlink:http://www.us-cert.gov/cas/techalerts/TA09-133A.html

External Source: FEDORA

Name: FEDORA-2008-9372

Hyperlink:https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00040.html

External Source: FEDORA

Name: FEDORA-2008-9351

Hyperlink:https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00014.html

External Source: XF

Name: gnuenscript-readspecialescape-bo(46026)

Hyperlink:http://xforce.iss.net/xforce/xfdb/46026

External Source: VUPEN

Name: ADV-2009-1297

Hyperlink:http://www.vupen.com/english/advisories/2009/1297

External Source: UBUNTU

Name: USN-660-1

Hyperlink:http://www.ubuntu.com/usn/usn-660-1

External Source: BID

Name: 31858

Hyperlink:http://www.securityfocus.com/bid/31858

External Source: BUGTRAQ

Name: 20081022 Secunia Research: GNU Enscript "setfilename" Special Escape Buffer Overflow

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/497647/100/0/threaded

External Source: REDHAT

Name: RHSA-2008:1016

Hyperlink:http://www.redhat.com/support/errata/RHSA-2008-1016.html

External Source: MANDRIVA

Name: MDVSA-2008:243

Hyperlink:http://www.mandriva.com/security/advisories?name=MDVSA-2008:243

External Source: VUPEN

Name: ADV-2008-2891

Hyperlink:http://www.frsirt.com/english/advisories/2008/2891

External Source: CONFIRM

Name: http://support.avaya.com/elmodocs2/security/ASA-2008-504.htm

Hyperlink:http://support.avaya.com/elmodocs2/security/ASA-2008-504.htm

External Source: CONFIRM

Name: http://support.apple.com/kb/HT3549

Hyperlink:http://support.apple.com/kb/HT3549

External Source: SREASON

Name: 4488

Hyperlink:http://securityreason.com/securityalert/4488

External Source: GENTOO

Name: GLSA-200812-02

Hyperlink:http://security.gentoo.org/glsa/glsa-200812-02.xml

External Source: MISC

Name: http://secunia.com/secunia_research/2008-41/

Type: Advisory

Hyperlink:http://secunia.com/secunia_research/2008-41/

External Source: SECUNIA

Name: 35074

Hyperlink:http://secunia.com/advisories/35074

External Source: SECUNIA

Name: 33109

Hyperlink:http://secunia.com/advisories/33109

External Source: SECUNIA

Name: 32970

Hyperlink:http://secunia.com/advisories/32970

External Source: SECUNIA

Name: 32530

Type: Advisory

Hyperlink:http://secunia.com/advisories/32530

External Source: SECUNIA

Name: 32521

Hyperlink:http://secunia.com/advisories/32521

External Source: SECUNIA

Name: 32137

Type: Advisory

Hyperlink:http://secunia.com/advisories/32137

External Source: SUSE

Name: SUSE-SR:2008:024

Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00000.html

External Source: APPLE

Name: APPLE-SA-2009-05-12

Hyperlink:http://lists.apple.com/archives/security-announce/2009/May/msg00002.html