Back to search
CVE-2005-0638
Published: Mar 4, 2005
Modified: Aug 7, 2024
PUBLISHED
Description
xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbitrary commands via shell metacharacters in filenames for compressed images, which are not properly quoted when calling the gunzip command.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
12712
vdb-entry
x_refsource_BID
GLSA-200503-05
vendor-advisory
x_refsource_GENTOO
14459
third-party-advisory
x_refsource_SECUNIA
http://bugs.gentoo.org/show_bug.cgi?id=79762
x_refsource_CONFIRM
DSA-695
vendor-advisory
x_refsource_DEBIAN
RHSA-2005:332
vendor-advisory
x_refsource_REDHAT
http://support.avaya.com/elmodocs2/security/ASA-2005-134_RHSA-2005-332.pdf
x_refsource_CONFIRM
14462
third-party-advisory
x_refsource_SECUNIA
oval:org.mitre.oval:def:10898
vdb-entry
signature
x_refsource_OVAL
FLSA-2006:152923
vendor-advisory
x_refsource_FEDORA
14365
vdb-entry
x_refsource_OSVDB
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now