CVE-2005-0638 xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbitrary commands via shell metacharacters in filenames for compressed images, which are not properly quoted when calling th...
HighCVSS 7.5
EPSS 3.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbitrary commands via shell metacharacters in filenames for compressed images, which are not properly quoted when calling the gunzip command.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xli | = 1.14 | No fix listed |
| xli | = 1.15 | No fix listed |
| xli | = 1.16 | No fix listed |
| xli | = 1.17 | No fix listed |
| altlinux alt linux | = 2.3 | No fix listed |
| suse linux | = 1.0 | No fix listed |
| suse linux | = 2.0 | No fix listed |
| suse linux | = 3.0 | No fix listed |
| suse linux | = 4.0 | No fix listed |
| suse linux | = 4.2 | No fix listed |
| suse linux | = 4.3 | No fix listed |
| suse linux | = 4.4 | No fix listed |
| suse linux | = 4.4.1 | No fix listed |
| suse linux | = 5.0 | No fix listed |
| suse linux | = 5.1 | No fix listed |
| suse linux | = 5.2 | No fix listed |
| suse linux | = 5.3 | No fix listed |
| suse linux | = 6.0 | No fix listed |
| suse linux | = 6.1 | No fix listed |
| suse linux | = 6.1-alpha | No fix listed |
| suse linux | = 6.2 | No fix listed |
| suse linux | = 6.3 | No fix listed |
| suse linux | = 6.3-alpha | No fix listed |
| suse linux | = 6.4 | No fix listed |
| suse linux | = 6.4-alpha | No fix listed |
Show 19 more
| Product | Affected versions | Fixed in |
|---|---|---|
| suse linux | = 7.0 | No fix listed |
| suse linux | = 7.0-alpha | No fix listed |
| suse linux | = 7.1 | No fix listed |
| suse linux | = 7.1-alpha | No fix listed |
| suse linux | = 7.2 | No fix listed |
| suse linux | = 7.3 | No fix listed |
| suse linux | = 8.0 | No fix listed |
| suse linux | = 8.1 | No fix listed |
| suse linux | = 8.2 | No fix listed |
| suse linux | = 9.0 | No fix listed |
| suse linux | = 9.1 | No fix listed |
| suse linux | = 9.2 | No fix listed |
| suse linux | = 9.3 | No fix listed |
| debian/xli(Debian:12) | < 1.17.0-18 | 1.17.0-18 |
| debian/xli(Debian:13) | < 1.17.0-18 | 1.17.0-18 |
| debian/xli(Debian:14) | < 1.17.0-18 | 1.17.0-18 |
| debian/xloadimage(Debian:12) | < 4.1-14.1 | 4.1-14.1 |
| debian/xloadimage(Debian:13) | < 4.1-14.1 | 4.1-14.1 |
| debian/xloadimage(Debian:14) | < 4.1-14.1 | 4.1-14.1 |
References
- bugs.gentoo.org vendor-advisory
- 14459 patch third-party-advisory vendor-advisory
- 14462 third-party-advisory vendor-advisory
- GLSA-200503-05 vendor-advisory
- support.avaya.com
- DSA-695 vendor-advisory
- 14365 vdb-entry
- RHSA-2005:332 vendor-advisory
- FLSA-2006:152923 vendor-advisory
- 12712 vdb-entry
- oval:org.mitre.oval:def:10898 signature vdb-entry
- Debian Security Tracker CVE-2005-0638 vendor-advisory
- bugs.debian.org issue-tracking