critical10.0Public exploit code
CVE-2004-1170
a2ps 4.13 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- GNU a2ps 4.13 - File Name Command Execution2004-08-24 · local · linux · Verified
Impact
a2ps 4.13 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gnu | A2ps | Versions 4.13, 4.13b |
| Sun | Java Desktop System | Versions 2.0, 2003 |
| Suse | Suse Linux | Versions 8, 8.1, 8.2, 9.0, 9.1 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/fulldisclosure/2004-08/1026.html
- http://bugs.debian.org/283134
- http://marc.info/?l=bugtraq&m=110598355226660&w=2
- http://secunia.com/advisories/12375
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-57649-1&searchclause=
- http://www.mandriva.com/security/advisories?name=MDKSA-2004:140
- http://www.novell.com/linux/security/advisories/2004_34_xfree86_libs_xshared.html
- http://www.securiteam.com/unixfocus/5MP0N2KDPA.html
- http://www.securityfocus.com/archive/1/419765/100/0/threaded
- http://www.securityfocus.com/bid/11025
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17127
- http://archives.neohapsis.com/archives/fulldisclosure/2004-08/1026.html
- http://bugs.debian.org/283134
- http://marc.info/?l=bugtraq&m=110598355226660&w=2
- http://secunia.com/advisories/12375
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-57649-1&searchclause=
- http://www.mandriva.com/security/advisories?name=MDKSA-2004:140
- http://www.novell.com/linux/security/advisories/2004_34_xfree86_libs_xshared.html
- http://www.securiteam.com/unixfocus/5MP0N2KDPA.html
- http://www.securityfocus.com/archive/1/419765/100/0/threaded
- http://www.securityfocus.com/bid/11025
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17127