CVE:CVE-2004-1184
CNNVD:CNNVD-200501-263
Enscript是一款开源软件，用于将ASCII文件转换为postscript、HTML或RTF文件。
Enscript 1.6.3版本中的EPSF管道支持存在命令执行漏洞。
远程攻击者或本地用户可利用此漏洞，通过shell元字符执行任意命令。
solution:Upgrade gnu enscript to a higher version than 1.4,1.5,1.6,1.6.1,1.6.2,1.6.3,1.6.4,and avoid the version 1.4,1.5,1.6,1.6.1,1.6.2,1.6.3,1.6.4; Upgrade sgi propack to a higher version than 3.0,and avoid the version 3.0; Upgrade redhat fedora_core to a higher version than core_2.0,core_3.0,and avoid the version core_2.0,core_3.0; Upgrade suse suse_linux to a higher version than 1.0,2.0,3.0,4.0,4.2,4.3,4.4,4.4.1,5.0,5.1,5.2,5.3,6.0,6.1,6.1:alpha,6.2,6.3,6.3:alpha,6.4,6.4:alpha,7.0,7.0:alpha,7.1,7.1:alpha,7.2,7.3,8.0,8.1,8.2,9.0,9.1,9.2,and avoid the version 1.0,2.0,3.0,4.0,4.2,4.3,4.4,4.4.1,5.0,5.1,5.2,5.3,6.0,6.1,6.1:alpha,6.2,6.3,6.3:alpha,6.4,6.4:alpha,7.0,7.0:alpha,7.1,7.1:alpha,7.2,7.3,8.0,8.1,8.2,9.0,9.1,9.2