CVE-2008-5078

NameCVE-2008-5078
DescriptionMultiple buffer overflows in the (1) recognize_eps_file function (src/psgen.c) and (2) tilde_subst function (src/util.c) in GNU enscript 1.6.1, and possibly earlier, might allow remote attackers to execute arbitrary code via an epsf escape sequence with a long filename.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
ReferencesDSA-1670-1
Debian Bugs506261

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
enscript (PTS)bookworm, bullseye1.6.5.90-3fixed
sid, trixie1.6.5.90-3.1fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
enscriptsourceetch1.6.4-11.1DSA-1670-1
enscriptsource(unstable)1.6.4-13506261

Search for package or bug name: Reporting problems