Vulnerability CVE-2008-3863

Vulnerability Name:

CVE-2008-3863 (CCN-46026)

Assigned:

2008-10-22

Published:

2008-10-22

Updated:

2018-10-11

Summary:

Stack-based buffer overflow in the read_special_escape function in src/psgen.c in GNU Enscript 1.6.1 and 1.6.4 beta, when the -e (aka special escapes processing) option is enabled, allows user-assisted remote attackers to execute arbitrary code via a crafted ASCII file, related to the setfilename command.

CVSS v3 Severity:

7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): Low Availibility (A): Low

CVSS v2 Severity:

7.6 High (CVSS v2 Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C)
5.6 Medium (Temporal CVSS v2 Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): High Authentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

6.8 Medium (CCN CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P)
5.0 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Athentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

4.4 Medium (REDHAT CVSS v2 Vector: AV:L/AC:M/Au:N/C:P/I:P/A:P)
3.2 Low (REDHAT Temporal CVSS v2 Vector: AV:L/AC:M/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Medium Authentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

Vulnerability Type:

CWE-119

Vulnerability Consequences:

Gain Access

References:

Source: MITRE
Type: CNA
CVE-2008-3863

Source: APPLE
Type: UNKNOWN
APPLE-SA-2009-05-12

Source: SUSE
Type: UNKNOWN
SUSE-SR:2008:024

Source: CCN
Type: RHSA-2008-1016
Moderate: enscript security update

Source: CCN
Type: RHSA-2008-1021
Moderate: enscript security update

Source: REDHAT
Type: UNKNOWN
RHSA-2008:1021

Source: CCN
Type: SA32137
GNU Enscript "setfilename" Special Escape Buffer Overflow

Source: SECUNIA
Type: Vendor Advisory
32137

Source: SECUNIA
Type: UNKNOWN
32521

Source: SECUNIA
Type: Vendor Advisory
32530

Source: SECUNIA
Type: UNKNOWN
32753

Source: SECUNIA
Type: UNKNOWN
32854

Source: SECUNIA
Type: UNKNOWN
32970

Source: SECUNIA
Type: UNKNOWN
33109

Source: CCN
Type: SA35074
Apple Mac OS X Security Update Fixes Multiple Vulnerabilities

Source: SECUNIA
Type: UNKNOWN
35074

Source: CCN
Type: Secunia Research 22/10/2008
GNU Enscript "setfilename" Special Escape Buffer Overflow

Source: MISC
Type: Vendor Advisory
http://secunia.com/secunia_research/2008-41/

Source: GENTOO
Type: UNKNOWN
GLSA-200812-02

Source: SREASON
Type: UNKNOWN
4488

Source: CCN
Type: Apple Web site
About the security content of Security Update 2009-002 / Mac OS X v10.5.7

Source: CONFIRM
Type: UNKNOWN
http://support.apple.com/kb/HT3549

Source: CONFIRM
Type: UNKNOWN
http://support.avaya.com/elmodocs2/security/ASA-2008-504.htm

Source: CCN
Type: ASA-2008-504
enscript security update (RHSA-2008-1021)

Source: CONFIRM
Type: UNKNOWN
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0321

Source: CCN
Type: GNU Enscript Web page
GNU Enscript

Source: DEBIAN
Type: UNKNOWN
DSA-1670

Source: DEBIAN
Type: DSA-1670
enscript -- buffer overflows

Source: CCN
Type: GLSA-200812-02
enscript: User-assisted execution of arbitrary code

Source: MANDRIVA
Type: UNKNOWN
MDVSA-2008:243

Source: REDHAT
Type: UNKNOWN
RHSA-2008:1016

Source: BUGTRAQ
Type: UNKNOWN
20081022 Secunia Research: GNU Enscript "setfilename" Special Escape Buffer Overflow

Source: BUGTRAQ
Type: UNKNOWN
20081117 rPSA-2008-0321-1 enscript

Source: BID
Type: UNKNOWN
31858

Source: CCN
Type: BID-31858
GNU Enscript 'src/psgen.c' Stack Based Buffer Overflow Vulnerability

Source: CCN
Type: USN-660-1
enscript vulnerability

Source: UBUNTU
Type: UNKNOWN
USN-660-1

Source: CERT
Type: US Government Resource
TA09-133A

Source: VUPEN
Type: UNKNOWN
ADV-2008-2891

Source: VUPEN
Type: UNKNOWN
ADV-2009-1297

Source: XF
Type: UNKNOWN
enscript-readspecialescape-bo(46026)

Source: XF
Type: UNKNOWN
gnuenscript-readspecialescape-bo(46026)

Source: CONFIRM
Type: UNKNOWN
https://issues.rpath.com/browse/RPL-2887

Source: OVAL
Type: UNKNOWN
oval:org.mitre.oval:def:9939

Source: FEDORA
Type: UNKNOWN
FEDORA-2008-9351

Source: FEDORA
Type: UNKNOWN
FEDORA-2008-9372

Source: SUSE
Type: SUSE-SR:2008:024
SUSE Security Summary Report

Vulnerable Configuration:

Configuration 1:

cpe:/a:gnu:enscript:1.6.1:*:*:*:*:*:*:*

OR cpe:/a:gnu:enscript:1.6.4:beta:*:*:*:*:*:*

Configuration RedHat 1:

cpe:/o:redhat:enterprise_linux:5:*:*:*:*:*:*:*

Configuration RedHat 2:

cpe:/o:redhat:enterprise_linux:5::client:*:*:*:*:*

Configuration RedHat 3:

cpe:/o:redhat:enterprise_linux:5::server:*:*:*:*:*

Configuration RedHat 4:

cpe:/o:redhat:enterprise_linux:4:*:*:*:*:*:*:*

Configuration RedHat 5:

cpe:/o:redhat:enterprise_linux:4::as:*:*:*:*:*

Configuration RedHat 6:

cpe:/o:redhat:enterprise_linux:4::desktop:*:*:*:*:*

Configuration RedHat 7:

cpe:/o:redhat:enterprise_linux:4::es:*:*:*:*:*

Configuration RedHat 8:

cpe:/o:redhat:enterprise_linux:4::ws:*:*:*:*:*

Configuration CCN 1:

cpe:/a:gnu:enscript:1.6.1:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.5:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*

OR cpe:/a:gnu:enscript:1.6.4:beta:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*

AND

cpe:/o:gentoo:linux:*:*:*:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:2.1:*:as:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:2.1:*:es:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:2.1:*:ws:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:3::ws:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:3::es:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:3::as:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:3::desktop:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:*:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:4::as:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:4::desktop:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:4::es:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:4::ws:*:*:*:*:*

OR cpe:/o:redhat:linux_advanced_workstation:2.1::itanium:*:*:*:*:*

OR cpe:/o:canonical:ubuntu:6.06::lts:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux_corporate_server:3.0::x86_64:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:5:*:*:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:2008.0::x86-64:*:*:*:*:*

OR cpe:/o:debian:debian_linux:4.0:*:*:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:5:*:client:*:*:*:*:*

OR cpe:/o:canonical:ubuntu:7.10:*:*:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:2008.0:*:*:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:2008.1:x86_64:*:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:2008.1:*:*:*:*:*:*:*

OR cpe:/o:canonical:ubuntu:8.04::lts:*:*:*:*:*

OR cpe:/o:mandriva:linux:2009.0:*:*:*:*:*:*:*

OR cpe:/o:mandriva:linux:2009.0:-:x86_64:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:20083863	V	CVE-2008-3863	2023-06-22
oval:org.opensuse.security:def:7491	P	enscript-1.6.6-1.17 on GA media (Moderate)	2023-06-12
oval:org.opensuse.security:def:647	P	Security update for python-waitress (Important) (in QA)	2022-10-05
oval:org.opensuse.security:def:2916	P	enscript-1.6.6-1.17 on GA media (Moderate)	2022-06-22
oval:org.opensuse.security:def:94546	P	enscript-1.6.6-1.17 on GA media (Moderate)	2022-06-22
oval:org.opensuse.security:def:68	P	glibc-2.31-7.30 on GA media (Moderate)	2022-06-13
oval:org.opensuse.security:def:52	P	enscript-1.6.6-1.17 on GA media (Moderate)	2022-06-13
oval:org.opensuse.security:def:347	P	zsh-5.6-5.17 on GA media (Moderate)	2022-06-13
oval:org.opensuse.security:def:981	P	Security update for libarchive (Moderate)	2022-03-24
oval:org.opensuse.security:def:100416	P	(Important)	2022-02-18
oval:org.opensuse.security:def:42297	P	Security update for the Linux Kernel (Important)	2022-01-26
oval:org.opensuse.security:def:112191	P	enscript-1.6.6-1.15 on GA media (Moderate)	2022-01-17
oval:org.opensuse.security:def:105723	P	Security update for busybox (Important) (in QA)	2022-01-14
oval:org.opensuse.security:def:31375	P	Security update for libvirt (Important)	2022-01-10
oval:org.opensuse.security:def:31723	P	Security update for chrony (Moderate)	2021-12-22
oval:org.opensuse.security:def:32251	P	Security update for xorg-x11-server (Important)	2021-12-20
oval:org.opensuse.security:def:31318	P	Security update for mozilla-nss (Important)	2021-12-06
oval:org.opensuse.security:def:26172	P	Security update for webkit2gtk3 (Important)	2021-11-23
oval:org.opensuse.security:def:33043	P	Security update for samba (Important)	2021-11-19
oval:org.opensuse.security:def:26158	P	Security update for binutils (Moderate)	2021-11-02
oval:org.opensuse.security:def:69739	P	Security update for glibc (Moderate)	2021-10-12
oval:org.opensuse.security:def:70834	P	Security update for ffmpeg (Important)	2021-09-23
oval:org.opensuse.security:def:32195	P	Security update for sqlite3 (Important)	2021-09-23
oval:org.opensuse.security:def:96556	P	enscript-1.6.6-1.17 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:103246	P	enscript-1.6.6-1.17 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:71177	P	enscript-1.6.6-1.17 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:89591	P	enscript-1.6.6-1.17 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:61436	P	enscript-1.6.6-1.17 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:26119	P	Security update for file (Important)	2021-09-02
oval:org.opensuse.security:def:32177	P	Security update for bind (Moderate)	2021-08-30
oval:org.opensuse.security:def:31674	P	Security update for aspell (Important)	2021-08-25
oval:org.opensuse.security:def:31671	P	Security update for openssl (Important)	2021-08-24
oval:org.opensuse.security:def:31667	P	Security update for fetchmail (Moderate)	2021-08-18
oval:org.opensuse.security:def:31245	P	Security update for MozillaFirefox (Important)	2021-08-17
oval:org.opensuse.security:def:47650	P	java-1_7_0-openjdk-1.7.0.181-43.15.2 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47329	P	libapr-util1-1.5.3-1.46 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47994	P	dovecot22-2.2.31-19.17.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47290	P	ipsec-tools-0.8.0-18.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47588	P	cvs-1.12.12-182.3.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47197	P	accountsservice-0.6.42-14.2 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47929	P	xscreensaver-5.22-7.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47569	P	busybox-1.21.1-3.3 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47004	P	libXxf86dga1-1.1.4-3.58 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47817	P	libyaml-0-2-0.1.6-7.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47867	P	python-libxml2-2.9.4-46.15.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47142	P	quagga-0.99.22.1-12.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:46883	P	aaa_base-13.2+git20140911.61c1681-28.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47746	P	libmysqlclient18-10.0.35-1.7 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47504	P	squidGuard-1.4-29.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:48096	P	libass5-0.10.2-3.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47050	P	libmspack0-0.4-14.4 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47715	P	libgypsy0-0.9-6.22 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47421	P	libtirpc-netconfig-1.0.1-16.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:48025	P	gnome-shell-search-provider-nautilus-3.20.3-23.12.10 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47783	P	libsndfile1-1.0.25-36.16.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:46918	P	curl-7.37.0-28.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:71811	P	enscript-1.6.6-1.17 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:62070	P	enscript-1.6.6-1.17 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:100828	P	enscript-1.6.6-1.17 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:26094	P	Security update for curl (Moderate)	2021-07-23
oval:org.opensuse.security:def:31226	P	Security update for the Linux Kernel (Live Patch 37 for SLE 12 SP3) (Important)	2021-07-21
oval:org.opensuse.security:def:42098	P	Security update for qemu (Moderate)	2021-06-30
oval:org.opensuse.security:def:32133	P	Security update for libgcrypt (Important)	2021-06-24
oval:org.opensuse.security:def:46868	P	wpa_supplicant-2.2-8.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:70947	P	libXext-devel-1.3.3-1.30 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48455	P	krb5-appl-clients-1.0.3-1.2 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:46725	P	libfreetype6-2.5.5-7.5.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48788	P	libgadu3-1.11.4-1.12 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:32111	P	Security update for MozillaFirefox (Important)	2021-06-08
oval:org.opensuse.security:def:46604	P	zoo-2.10-1020.56 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:42526	P	enscript-1.6.4-152.22.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48734	P	libgio-fam-2.38.2-5.12 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:70898	P	enscript-1.6.6-1.17 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:26070	P	Security update for spice (Important)	2021-06-08
oval:org.opensuse.security:def:46590	P	vorbis-tools-1.4.0-16.2 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:61157	P	enscript-1.6.6-1.17 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:46589	P	vino-3.10.1-1.81 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:46869	P	xalan-j2-2.7.0-264.133 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:36119	P	enscript-1.6.4-152.22.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48509	P	libjavascriptcoregtk-3_0-0-2.4.11-23.20 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:31171	P	Security update for avahi (Important)	2021-06-03
oval:org.opensuse.security:def:31618	P	Security update for avahi (Important)	2021-06-03
oval:org.opensuse.security:def:31613	P	Security update for tomcat (Important)	2021-04-29
oval:org.opensuse.security:def:69634	P	Security update for MozillaFirefox (Important)	2021-04-29
oval:org.opensuse.security:def:31160	P	Security update for the Linux Kernel (Live Patch 38 for SLE 12 SP3) (Important)	2021-04-28
oval:org.opensuse.security:def:31159	P	Security update for the Linux Kernel (Live Patch 37 for SLE 12 SP3) (Important)	2021-04-28
oval:org.opensuse.security:def:32072	P	Security update for xen (Important)	2021-04-19
oval:org.opensuse.security:def:26216	P	Security update for MozillaFirefox (Important)	2021-03-31
oval:org.opensuse.security:def:31369	P	Security update for MozillaFirefox (Important)	2021-03-31
oval:org.opensuse.security:def:31358	P	Security update for glib2 (Important)	2021-03-16
oval:org.opensuse.security:def:33082	P	Security update for freeradius-server (Low)	2021-02-22
oval:org.opensuse.security:def:31724	P	Security update for python (Important)	2021-02-11
oval:org.opensuse.security:def:31357	P	Security update for MozillaFirefox (Important)	2021-01-12
oval:org.opensuse.security:def:116640	P	enscript-1.6.6-1.17 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:93703	P	enscript-1.6.6-1.17 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:61736	P	enscript-1.6.6-1.17 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:35691	P	enscript-1.6.4-152.22.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:41947	P	enscript-1.6.4-152.17.55 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:35890	P	enscript-1.6.4-152.22.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:49034	P	libreoffice-6.2.7.1-43.56.3 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:107082	P	enscript-1.6.6-1.17 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:71477	P	enscript-1.6.6-1.17 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:35540	P	enscript-1.6.4-152.17.55 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:25446	P	Security update for nfs-utils (Moderate)	2020-12-01
oval:org.opensuse.security:def:31462	P	Security update for postgresql94 (Important)	2020-12-01
oval:org.opensuse.security:def:66383	P	enscript on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:31094	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:25921	P	Recommended update for mariadb (Important)	2020-12-01
oval:org.opensuse.security:def:26444	P	Security update for mumble (Moderate)	2020-12-01
oval:org.opensuse.security:def:32656	P	enscript on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:31597	P	Security update for tiff (Moderate)	2020-12-01
oval:org.opensuse.security:def:25103	P	Security update for java-1_7_0-openjdk (Important)	2020-12-01
oval:org.opensuse.security:def:25725	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:31967	P	Security update for intel-SINIT (Important)	2020-12-01
oval:org.opensuse.security:def:25669	P	Security update for gcc10 (Moderate)	2020-12-01
oval:org.opensuse.security:def:31377	P	Security update for openssl1 (Moderate)	2020-12-01
oval:org.opensuse.security:def:26854	P	NetworkManager-gnome on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25517	P	Security update for qemu (Moderate)	2020-12-01
oval:org.opensuse.security:def:31874	P	Security update for cyrus-imapd (Important)	2020-12-01
oval:org.opensuse.security:def:32405	P	Security update for wavpack (Moderate)	2020-12-01
oval:org.opensuse.security:def:25242	P	Security update for mariadb-100 (Moderate)	2020-12-01
oval:org.opensuse.security:def:25318	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:26010	P	Security update for libvirt (Important)	2020-12-01
oval:org.opensuse.security:def:25867	P	Security update for flash-player (Critical)	2020-12-01
oval:org.opensuse.security:def:26889	P	enscript on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:31020	P	Security update for java-1_7_0-ibm (Important)	2020-12-01
oval:org.opensuse.security:def:25721	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:26400	P	Security update for Chromium (Important)	2020-12-01
oval:org.opensuse.security:def:66291	P	Security update for dia (Moderate)	2020-12-01
oval:org.opensuse.security:def:31586	P	Security update for tcpdump (Moderate)	2020-12-01
oval:org.opensuse.security:def:26245	P	Security update for python (Moderate)	2020-12-01
oval:org.opensuse.security:def:32617	P	xorg-x11 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25092	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:25644	P	Security update for taglib (Low)	2020-12-01
oval:org.opensuse.security:def:72956	P	Security update for MozillaThunderbird (Important)	2020-12-01
oval:org.opensuse.security:def:67594	P	enscript on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:31952	P	Security update for grub2 (Important)	2020-12-01
oval:org.opensuse.security:def:31828	P	Security update for bind (Important)	2020-12-01
oval:org.opensuse.security:def:32854	P	enscript on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25433	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:31825	P	Security update for bind (Important)	2020-12-01
oval:org.opensuse.security:def:32361	P	Security update for strongswan (Important)	2020-12-01
oval:org.opensuse.security:def:73074	P	enscript on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25254	P	Security update for squid (Important)	2020-12-01
oval:org.opensuse.security:def:25953	P	Security update for gcc48 (Moderate)	2020-12-01
oval:org.opensuse.security:def:25823	P	Security update for flash-player (Important)	2020-12-01
oval:org.opensuse.security:def:31009	P	Security update for java-1_6_0-ibm (Important)	2020-12-01
oval:org.opensuse.security:def:31575	P	Security update for sudo	2020-12-01
oval:org.opensuse.security:def:26386	P	Security update for kdepim, messagelib (Moderate)	2020-12-01
oval:org.opensuse.security:def:27082	P	apache2-mod_nss on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:31585	P	Security update for tcpdump (Moderate)	2020-12-01
oval:org.opensuse.security:def:25866	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:49088	P	enscript on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25440	P	Security update for python-xdg (Moderate)	2020-12-01
oval:org.opensuse.security:def:25516	P	Security update for file-roller (Moderate)	2020-12-01
oval:org.opensuse.security:def:26018	P	Security update for freerdp (Important)	2020-12-01
oval:org.opensuse.security:def:27117	P	enscript on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:31895	P	Security update for MozillaFirefox, mozilla-nspr (Important)	2020-12-01
oval:org.opensuse.security:def:31784	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:67494	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:25376	P	Security update for dovecot22 (Important)	2020-12-01
oval:org.opensuse.security:def:32339	P	Security update for shim (Moderate)	2020-12-01
oval:org.opensuse.security:def:32815	P	LibVNCServer on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25243	P	Security update for java-1_8_0-ibm (Important)	2020-12-01
oval:org.opensuse.security:def:25872	P	Security update for ImageMagick (Important)	2020-12-01
oval:org.opensuse.security:def:31811	P	Security update for apache2 (Important)	2020-12-01
oval:org.opensuse.security:def:25809	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:26505	P	Security update for phpMyAdmin (Moderate)	2020-12-01
oval:org.opensuse.security:def:31008	P	Security update for java-1_6_0-ibm (Important)	2020-12-01
oval:org.opensuse.security:def:31443	P	Security update for policycoreutils (Moderate)	2020-12-01
oval:org.opensuse.security:def:26347	P	Security update for jq (Low)	2020-12-01
oval:org.opensuse.security:def:31979	P	Security update for java-1_7_1-ibm (Important)	2020-12-01
oval:org.opensuse.security:def:25584	P	Security update for xerces-c (Moderate)	2020-12-01
oval:org.opensuse.security:def:32023	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:26540	P	enscript on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25452	P	Security update for libssh2_org (Moderate)	2020-12-01
oval:org.opensuse.security:def:25974	P	Security update for gimp (Moderate)	2020-12-01
oval:org.opensuse.security:def:31803	P	Security update for amanda (Moderate)	2020-12-01
oval:org.opensuse.security:def:25819	P	Security update for python-tornado (Moderate)	2020-12-01
oval:org.opensuse.security:def:31762	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:25295	P	Security update for python-ipaddress (Important)	2020-12-01
oval:org.opensuse.security:def:32300	P	Security update for python (Moderate)	2020-12-01
oval:org.opensuse.security:def:64247	P	enscript on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25668	P	Security update for python3 (Moderate)	2020-12-01
oval:org.opensuse.security:def:25744	P	Security update for djvulibre (Low)	2020-12-01
oval:org.opensuse.security:def:31526	P	Security update for rsyslog (Moderate)	2020-12-01
oval:org.opensuse.security:def:25770	P	Security update for flash-player (Important)	2020-12-01
oval:org.opensuse.security:def:32505	P	enscript on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:26298	P	Security update for mariadb-100 (Moderate)	2020-12-01
oval:org.opensuse.security:def:31935	P	Security update for glibc (Important)	2020-12-01
oval:org.opensuse.security:def:25527	P	Security update for java-11-openjdk (Moderate)	2020-12-01
oval:org.opensuse.security:def:31769	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:25441	P	Security update for dhcp (Moderate)	2020-12-01
oval:org.opensuse.security:def:32039	P	Security update for kernel modules packages (Moderate)	2020-12-01
oval:org.opensuse.security:def:25960	P	Security update for gimp (Moderate)	2020-12-01
oval:org.opensuse.security:def:26656	P	zoo on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25091	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:25167	P	Security update for python-PyYAML (Important)	2020-12-01
oval:org.opensuse.security:def:25782	P	Security update for evolution-data-server (Moderate)	2020-12-01
oval:org.opensuse.security:def:26691	P	enscript on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25680	P	Security update for krb5 (Moderate)	2020-12-01
oval:org.opensuse.security:def:31469	P	Security update for ppc64-diag	2020-12-01
oval:org.opensuse.security:def:64160	P	Security update for bcm43xx-firmware (Moderate)	2020-12-01
oval:org.opensuse.security:def:26017	P	Security update for gnome-shell (Low)	2020-12-01
oval:org.opensuse.security:def:31913	P	Security update for gcc5 (Moderate)	2020-12-01
oval:org.opensuse.security:def:32466	P	Security update for xorg-x11-libs (Moderate)	2020-12-01
oval:org.mitre.oval:def:28976	P	RHSA-2008:1016 -- enscript security update (Moderate)	2015-08-17
oval:org.mitre.oval:def:16828	P	USN-660-1 -- enscript vulnerability	2014-06-30
oval:org.mitre.oval:def:18482	P	DSA-1670-1 enscript - arbitrary code execution	2014-06-23
oval:org.mitre.oval:def:7926	P	DSA-1670 enscript -- buffer overflows	2014-06-23
oval:org.mitre.oval:def:21904	P	ELSA-2008:1016: enscript security update (Moderate)	2014-05-26
oval:org.mitre.oval:def:9939	V	Stack-based buffer overflow in the read_special_escape function in src/psgen.c in GNU Enscript 1.6.1 and 1.6.4 beta, when the -e (aka special escapes processing) option is enabled, allows user-assisted remote attackers to execute arbitrary code via a crafted ASCII file, related to the setfilename command.	2013-04-29
oval:com.redhat.rhsa:def:20081016	P	RHSA-2008:1016: enscript security update (Moderate)	2008-12-15
oval:com.redhat.rhsa:def:20081021	P	RHSA-2008:1021: enscript security update (Moderate)	2008-12-15
oval:org.debian:def:1670	V	buffer overflows	2008-11-24

BACK