Synopsis

enscript security update

Type/Severity

Security Advisory: Low

Topic

An updated enscript package that fixes several security issues is now
available for Red Hat Enterprise Linux 4.

This update has been rated as having low security impact by the Red Hat
Security Response Team.

Description

GNU enscript converts ASCII files to PostScript.

Enscript has the ability to interpret special escape sequences. A flaw was
found in the handling of the epsf command used to insert inline EPS files
into a document. An attacker could create a carefully crafted ASCII file
which made use of the epsf pipe command in such a way that it could execute
arbitrary commands if the file was opened with enscript by a victim. The
Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned
the name CAN-2004-1184 to this issue.

Additional flaws in Enscript were also discovered which can only be
triggered by executing enscript with carefully crafted command line
arguments. These flaws therefore only have a security impact if enscript
is executed by other programs and passed untrusted data from remote users.
The Common Vulnerabilities and Exposures project (cve.mitre.org) has
assigned the names CAN-2004-1185 and CAN-2004-1186 to these issues.

All users of enscript should upgrade to these updated packages, which
contain backported patches to correct these issues.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied. Use Red Hat
Network to download and update your packages. To launch the Red Hat
Update Agent, use the following command:

up2date

For information on how to install packages manually, refer to the
following Web page for the System Administration or Customization
guide specific to your system:

http://www.redhat.com/docs/manuals/enterprise/

Affected Products

• Red Hat Enterprise Linux Server 4 x86_64
• Red Hat Enterprise Linux Server 4 ia64
• Red Hat Enterprise Linux Server 4 i386
• Red Hat Enterprise Linux Workstation 4 x86_64
• Red Hat Enterprise Linux Workstation 4 ia64
• Red Hat Enterprise Linux Workstation 4 i386
• Red Hat Enterprise Linux Desktop 4 x86_64
• Red Hat Enterprise Linux Desktop 4 i386
• Red Hat Enterprise Linux for IBM z Systems 4 s390x
• Red Hat Enterprise Linux for IBM z Systems 4 s390
• Red Hat Enterprise Linux for Power, big endian 4 ppc

Fixes

• BZ - 144686 - CAN-2004-1184 multiple security issues in enscript (CAN-2004-1185 CAN-2004-1186)

CVEs

• CVE-2004-1184
• CVE-2004-1185
• CVE-2004-1186

References

(none)

Red Hat Enterprise Linux Server 4

SRPM
enscript-1.6.1-28.3.src.rpm	SHA-256: 9ae4efc7e9284ced517b33256ebfb1aac8be160e88fd3b6c558cfe1070d19062
x86_64
enscript-1.6.1-28.3.x86_64.rpm	SHA-256: f1b6be66c8028860d0dc922bade087d7352ad7ddf8de297f86cd02b75710858d
enscript-1.6.1-28.3.x86_64.rpm	SHA-256: f1b6be66c8028860d0dc922bade087d7352ad7ddf8de297f86cd02b75710858d
ia64
enscript-1.6.1-28.3.ia64.rpm	SHA-256: f137e2432689a8df3d77a0f31f01368dc78d4a1e87c707a65f85d2abdb0b3eea
enscript-1.6.1-28.3.ia64.rpm	SHA-256: f137e2432689a8df3d77a0f31f01368dc78d4a1e87c707a65f85d2abdb0b3eea
i386
enscript-1.6.1-28.3.i386.rpm	SHA-256: 84cf6dde7a319540c95e04d98722fee68f8e72a42b97bf8b3321823e8824ba1a
enscript-1.6.1-28.3.i386.rpm	SHA-256: 84cf6dde7a319540c95e04d98722fee68f8e72a42b97bf8b3321823e8824ba1a

Red Hat Enterprise Linux Workstation 4

SRPM
enscript-1.6.1-28.3.src.rpm	SHA-256: 9ae4efc7e9284ced517b33256ebfb1aac8be160e88fd3b6c558cfe1070d19062
x86_64
enscript-1.6.1-28.3.x86_64.rpm	SHA-256: f1b6be66c8028860d0dc922bade087d7352ad7ddf8de297f86cd02b75710858d
ia64
enscript-1.6.1-28.3.ia64.rpm	SHA-256: f137e2432689a8df3d77a0f31f01368dc78d4a1e87c707a65f85d2abdb0b3eea
i386
enscript-1.6.1-28.3.i386.rpm	SHA-256: 84cf6dde7a319540c95e04d98722fee68f8e72a42b97bf8b3321823e8824ba1a

Red Hat Enterprise Linux Desktop 4

SRPM
enscript-1.6.1-28.3.src.rpm	SHA-256: 9ae4efc7e9284ced517b33256ebfb1aac8be160e88fd3b6c558cfe1070d19062
x86_64
enscript-1.6.1-28.3.x86_64.rpm	SHA-256: f1b6be66c8028860d0dc922bade087d7352ad7ddf8de297f86cd02b75710858d
i386
enscript-1.6.1-28.3.i386.rpm	SHA-256: 84cf6dde7a319540c95e04d98722fee68f8e72a42b97bf8b3321823e8824ba1a

Red Hat Enterprise Linux for IBM z Systems 4

SRPM
enscript-1.6.1-28.3.src.rpm	SHA-256: 9ae4efc7e9284ced517b33256ebfb1aac8be160e88fd3b6c558cfe1070d19062
s390x
enscript-1.6.1-28.3.s390x.rpm	SHA-256: 022c1a54a36fd879831a633e218fd030133a1a223a1f84c00722688fa183c32d
s390
enscript-1.6.1-28.3.s390.rpm	SHA-256: 52feebc22132ebdbb7a4d5580cfde0286b3de53da108433456a840e0ebb0f913

Red Hat Enterprise Linux for Power, big endian 4

SRPM
enscript-1.6.1-28.3.src.rpm	SHA-256: 9ae4efc7e9284ced517b33256ebfb1aac8be160e88fd3b6c558cfe1070d19062
ppc
enscript-1.6.1-28.3.ppc.rpm	SHA-256: aa04b84aebc5425c7775d757ab3b66e45719bb54c266562ebe6bb2e5c7076b6d