CVE-2004-1170: a2ps 4.13 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename.

Security readout for executives and security teams

CVE-2004-1170 is an old command-execution flaw in a2ps 4.13. If a system processes a file whose name contains special shell characters, a remote attacker may be able to make a2ps run unintended commands. Business urgency depends on whether a2ps is exposed through automated print, mail, or file-conversion workflows. Most exposure is likely in legacy Unix/Linux systems that still package a2ps 4.13, especially where untrusted filenames enter automated document processing, printing, or conversion paths. Systems without a2ps, or where only trusted local users can invoke it, have materially lower exposure. Prioritize if any externally influenced workflow invokes a2ps. Otherwise handle as a legacy hygiene issue during Unix/Linux package remediation. The main business risk is command execution inside document-processing paths that may be overlooked because this CVE is old. Mitigation focus: Inventory systems for a2ps and confirm exact package versions.; Apply relevant vendor updates or guidance from the referenced distribution advisories.; Remove a2ps where it is not required for business workflows..

Prepared

Jun 30, 2026, 02:08 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.