Exploitation Summary
EIP tracks 1 public exploit for CVE-2004-1170. PoCs published by Rudolf Polzer.
AI-analyzed exploit summary This exploit demonstrates a command injection vulnerability in GNU a2ps due to improper sanitization of filenames. By creating a file with a crafted name containing shell commands, an attacker can execute arbitrary commands when a2ps processes the file.
Description
a2ps 4.13 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename.
Exploits (1)
This exploit demonstrates a command injection vulnerability in GNU a2ps due to improper sanitization of filenames. By creating a file with a crafted name containing shell commands, an attacker can execute arbitrary commands when a2ps processes the file.