CVE-2005-0638
published 2005-03-02CVE-2005-0638: xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbitrary commands via shell metacharacters in filenames for compressed images…
PriorityP336high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
3.60%
88.0th percentile
xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbitrary commands via shell metacharacters in filenames for compressed images, which are not properly quoted when calling the gunzip command.
Affected
43 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| altlinux | alt_linux | — | — |
| debian | xli | < xli 1.17.0-18 (bookworm) | xli 1.17.0-18 (bookworm) |
| debian | xloadimage | < xli 1.17.0-18 (bookworm) | xli 1.17.0-18 (bookworm) |
| suse | suse_linux | — | — |
| suse | suse_linux | — | — |
| suse | suse_linux | — | — |
| suse | suse_linux | — | — |
| suse | suse_linux | — | — |
| suse | suse_linux | — | — |
| suse | suse_linux | — | — |
| suse | suse_linux | — | — |
| suse | suse_linux | — | — |
| suse | suse_linux | — | — |
| suse | suse_linux | — | — |
| suse | suse_linux | — | — |
| suse | suse_linux | — | — |
| suse | suse_linux | — | — |
| suse | suse_linux | — | — |
| suse | suse_linux | — | — |
| suse | suse_linux | — | — |
| suse | suse_linux | — | — |
| suse | suse_linux | — | — |
| suse | suse_linux | — | — |
| suse | suse_linux | — | — |
| suse | suse_linux | — | — |
CVSS provenance
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
osv7.5HIGH
vendor_debian7.5HIGH
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
security flaw
vendor_redhat·2005-02-18·CVSS 7.5
CVE-2005-0638 [HIGH] security flaw
security flaw
xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbitrary commands via shell metacharacters in filenames for compressed images, which are not properly quoted when calling the gunzip command.
Debian
CVE-2005-0638: xli - xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbit...
vendor_debian·2005·CVSS 7.5
CVE-2005-0638 [HIGH] CVE-2005-0638: xli - xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbit...
xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbitrary commands via shell metacharacters in filenames for compressed images, which are not properly quoted when calling the gunzip command.
Scope: local
bookworm: resolved (fixed in 1.17.0-18)
bullseye: resolved (fixed in 1.17.0-18)
forky: resolved (fixed in 1.17.0-18)
sid: resolved (fixed in 1.17.0-18)
trixie: resolved (fixed in 1.17.0-18)
GHSA
GHSA-r884-j2c4-8c9q: xloadimage before 4
ghsa_unreviewed·2022-05-01
CVE-2005-0638 [HIGH] GHSA-r884-j2c4-8c9q: xloadimage before 4
xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbitrary commands via shell metacharacters in filenames for compressed images, which are not properly quoted when calling the gunzip command.
OSV
CVE-2005-0638: xloadimage before 4
osv·2005-03-02·CVSS 7.5
CVE-2005-0638 [HIGH] CVE-2005-0638: xloadimage before 4
xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbitrary commands via shell metacharacters in filenames for compressed images, which are not properly quoted when calling the gunzip command.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2005-0638 security flaw
bugzilla·2018-08-16·CVSS 7.5
CVE-2005-0638 [HIGH] CVE-2005-0638 security flaw
CVE-2005-0638 security flaw
Flaw bug created to hold information about an old flaw we knew something about. For more details see the MITRE CVE description.
Discussion:
MITRE description:
xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbitrary commands via shell metacharacters in filenames for compressed images, which are not properly quoted when calling the gunzip command.
Bugzilla
xloadimage vulnerabilities CAN-2005-0638, CAN-2005-3178
bugzilla·2005-03-11
[MEDIUM] xloadimage vulnerabilities CAN-2005-0638, CAN-2005-3178
xloadimage vulnerabilities CAN-2005-0638, CAN-2005-3178
05.10.14 CVE: CAN-2005-0665
Platform: Unix
Title: xv Remote Format String Vulnerability
Description: xv is an image manipulation utility for the X Window
System. It is vulnerable to a remote format string vulnerability due
to improper sanitization of user input and can be exploited by an
attacker to execute arbitrary code. xv versions 3.10a and earlier are
vulnerable.
Ref: http://www.securityfocus.com/advisories/8184
05.10.15 CVE: CAN-2005-0605
Platform: Unix
Title: libXpm Bitmap_unit Integer Overflow
Description: libXpm is a graphics library that is shipped with the
XOrg and XFree86 projects. libXpm is affected by an integer overflow
vulnerability. There is no known workaround at this time.
Ref: http://www.gentoo.org/security/en/gl
http://bugs.gentoo.org/show_bug.cgi?id=79762http://secunia.com/advisories/14459http://secunia.com/advisories/14462http://security.gentoo.org/glsa/glsa-200503-05.xmlhttp://support.avaya.com/elmodocs2/security/ASA-2005-134_RHSA-2005-332.pdfhttp://www.debian.org/security/2005/dsa-695http://www.osvdb.org/14365http://www.redhat.com/support/errata/RHSA-2005-332.htmlhttp://www.securityfocus.com/archive/1/433935/30/5010/threadedhttp://www.securityfocus.com/bid/12712https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10898http://bugs.gentoo.org/show_bug.cgi?id=79762http://secunia.com/advisories/14459http://secunia.com/advisories/14462http://security.gentoo.org/glsa/glsa-200503-05.xmlhttp://support.avaya.com/elmodocs2/security/ASA-2005-134_RHSA-2005-332.pdfhttp://www.debian.org/security/2005/dsa-695http://www.osvdb.org/14365http://www.redhat.com/support/errata/RHSA-2005-332.htmlhttp://www.securityfocus.com/archive/1/433935/30/5010/threadedhttp://www.securityfocus.com/bid/12712https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10898
2005-03-02
Published