National Cyber Awareness System

Vulnerability Summary for CVE-2008-4306

Overview

Buffer overflow in enscript before 1.6.4 has unknown impact and attack vectors, possibly related to the font escape sequence.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: FEDORA

Name: FEDORA-2008-9372

Hyperlink:https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00040.html

External Source: FEDORA

Name: FEDORA-2008-9351

Hyperlink:https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00014.html

External Source: CONFIRM

Name: https://issues.rpath.com/browse/RPL-2887

Hyperlink:https://issues.rpath.com/browse/RPL-2887

External Source: UBUNTU

Name: USN-660-1

Hyperlink:http://www.ubuntu.com/usn/usn-660-1

External Source: BUGTRAQ

Name: 20081117 rPSA-2008-0321-1 enscript

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/498385/100/0/threaded

External Source: REDHAT

Name: RHSA-2008:1016

Hyperlink:http://www.redhat.com/support/errata/RHSA-2008-1016.html

External Source: MANDRIVA

Name: MDVSA-2008:243

Hyperlink:http://www.mandriva.com/security/advisories?name=MDVSA-2008:243

External Source: DEBIAN

Name: DSA-1670

Hyperlink:http://www.debian.org/security/2008/dsa-1670

External Source: CONFIRM

Name: http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0321

Hyperlink:http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0321

External Source: CONFIRM

Name: http://support.avaya.com/elmodocs2/security/ASA-2008-504.htm

Hyperlink:http://support.avaya.com/elmodocs2/security/ASA-2008-504.htm

External Source: GENTOO

Name: GLSA-200812-02

Hyperlink:http://security.gentoo.org/glsa/glsa-200812-02.xml

External Source: SECUNIA

Name: 33109

Hyperlink:http://secunia.com/advisories/33109

External Source: SECUNIA

Name: 32970

Hyperlink:http://secunia.com/advisories/32970

External Source: SECUNIA

Name: 32854

Hyperlink:http://secunia.com/advisories/32854

External Source: SECUNIA

Name: 32753

Hyperlink:http://secunia.com/advisories/32753

External Source: SECUNIA

Name: 32530

Type: Advisory

Hyperlink:http://secunia.com/advisories/32530

External Source: SECUNIA

Name: 32521

Hyperlink:http://secunia.com/advisories/32521

External Source: REDHAT

Name: RHSA-2008:1021

Hyperlink:http://rhn.redhat.com/errata/RHSA-2008-1021.html

External Source: OVAL

Name: oval:org.mitre.oval:def:10718

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10718

External Source: OSVDB

Name: 49569

Hyperlink:http://osvdb.org/49569

External Source: SUSE

Name: SUSE-SR:2008:024

Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00000.html

References to Check Content

Identifier:oval:org.mitre.oval:def:10718

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:10718