CVE-2004-1170

GNU a2ps 4.13 - File Name Command Execution

Severity Score

10.0

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

a2ps 4.13 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename.

*Credits: N/A

CVSS Scores

NISTv2 10.0

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Complete

Integrity

Complete

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2004-08-24 First Exploit
2004-12-09 CVE Reserved
2004-12-10 CVE Published
2023-11-17 EPSS Updated
2024-08-08 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CAPEC

References (12)

URL	Tag	Source
http://bugs.debian.org/283134	X_refsource_confirm
http://secunia.com/advisories/12375	Third Party Advisory
http://www.securiteam.com/unixfocus/5MP0N2KDPA.html	X_refsource_misc
https://exchange.xforce.ibmcloud.com/vulnerabilities/17127	Vdb Entry

URL	Date	SRC
https://www.exploit-db.com/exploits/24406	2004-08-24
http://archives.neohapsis.com/archives/fulldisclosure/2004-08/1026.html	2024-08-08
http://www.securityfocus.com/bid/11025	2024-08-08

URL	Date	SRC

URL	Date	SRC
http://marc.info/?l=bugtraq&m=110598355226660&w=2	2018-10-19
http://sunsolve.sun.com/search/document.do?assetkey=1-26-57649-1&searchclause=	2018-10-19
http://www.mandriva.com/security/advisories?name=MDKSA-2004:140	2018-10-19
http://www.novell.com/linux/security/advisories/2004_34_xfree86_libs_xshared.html	2018-10-19
http://www.securityfocus.com/archive/1/419765/100/0/threaded	2018-10-19

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Gnu Search vendor "Gnu"		A2ps Search vendor "Gnu" for product "A2ps"				4.13 Search vendor "Gnu" for product "A2ps" and version "4.13"		-		Affected
Gnu Search vendor "Gnu"		A2ps Search vendor "Gnu" for product "A2ps"				4.13b Search vendor "Gnu" for product "A2ps" and version "4.13b"		-		Affected
Sun Search vendor "Sun"		Java Desktop System Search vendor "Sun" for product "Java Desktop System"				2.0 Search vendor "Sun" for product "Java Desktop System" and version "2.0"		-		Affected
Sun Search vendor "Sun"		Java Desktop System Search vendor "Sun" for product "Java Desktop System"				2003 Search vendor "Sun" for product "Java Desktop System" and version "2003"		-		Affected
Suse Search vendor "Suse"		Suse Linux Search vendor "Suse" for product "Suse Linux"				8 Search vendor "Suse" for product "Suse Linux" and version "8"		enterprise_server		Affected
Suse Search vendor "Suse"		Suse Linux Search vendor "Suse" for product "Suse Linux"				8.1 Search vendor "Suse" for product "Suse Linux" and version "8.1"		-		Affected
Suse Search vendor "Suse"		Suse Linux Search vendor "Suse" for product "Suse Linux"				8.2 Search vendor "Suse" for product "Suse Linux" and version "8.2"		-		Affected
Suse Search vendor "Suse"		Suse Linux Search vendor "Suse" for product "Suse Linux"				9.0 Search vendor "Suse" for product "Suse Linux" and version "9.0"		-		Affected
Suse Search vendor "Suse"		Suse Linux Search vendor "Suse" for product "Suse Linux"				9.0 Search vendor "Suse" for product "Suse Linux" and version "9.0"		enterprise_server		Affected
Suse Search vendor "Suse"		Suse Linux Search vendor "Suse" for product "Suse Linux"				9.0 Search vendor "Suse" for product "Suse Linux" and version "9.0"		x86_64		Affected
Suse Search vendor "Suse"		Suse Linux Search vendor "Suse" for product "Suse Linux"				9.1 Search vendor "Suse" for product "Suse Linux" and version "9.1"		-		Affected