CVE-2004-1184: GNU Enscript

Medium severity, CVSS 4.6. EPSS: 1.2% chance of exploitation in the next 30 days.

The EPSF pipe support in enscript 1.6.3 allows remote attackers or local users to execute arbitrary commands via shell metacharacters.

Affected products

• GNU Enscript: version 1.4 only; version 1.5 only; version 1.6 only; version 1.6.1 only; version 1.6.2 only; version 1.6.3 only; …
• Red Hat Fedora Core: version core_2.0 only; version core_3.0 only
• Sgi Propack: version 3.0 only
• Suse Suse Linux: version 1.0 only; version 2.0 only; version 3.0 only; version 4.0 only; version 4.2 only; version 4.3 only; …

Published 2005-01-21. Last modified 2026-06-16.