7.5

CVE-2005-0638

xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbitrary commands via shell metacharacters in filenames for compressed images, which are not properly quoted when calling the gunzip command.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Xli ≫ Xli Version 1.14
Xli ≫ Xli Version 1.15
Xli ≫ Xli Version 1.16
Xli ≫ Xli Version 1.17
Altlinux ≫ Alt Linux Version 2.3 Edition compact
Altlinux ≫ Alt Linux Version 2.3 Edition junior
Suse ≫ Suse Linux Version 1.0
Suse ≫ Suse Linux Version 2.0
Suse ≫ Suse Linux Version 3.0
Suse ≫ Suse Linux Version 4.0
Suse ≫ Suse Linux Version 4.2
Suse ≫ Suse Linux Version 4.3
Suse ≫ Suse Linux Version 4.4
Suse ≫ Suse Linux Version 4.4.1
Suse ≫ Suse Linux Version 5.0
Suse ≫ Suse Linux Version 5.1
Suse ≫ Suse Linux Version 5.2
Suse ≫ Suse Linux Version 5.3
Suse ≫ Suse Linux Version 6.0
Suse ≫ Suse Linux Version 6.1
Suse ≫ Suse Linux Version 6.1 Update alpha
Suse ≫ Suse Linux Version 6.2
Suse ≫ Suse Linux Version 6.3
Suse ≫ Suse Linux Version 6.3 Edition ppc
Suse ≫ Suse Linux Version 6.3 Update alpha
Suse ≫ Suse Linux Version 6.4
Suse ≫ Suse Linux Version 6.4 Edition i386
Suse ≫ Suse Linux Version 6.4 Edition ppc
Suse ≫ Suse Linux Version 6.4 Update alpha
Suse ≫ Suse Linux Version 7.0
Suse ≫ Suse Linux Version 7.0 Edition i386
Suse ≫ Suse Linux Version 7.0 Edition ppc
Suse ≫ Suse Linux Version 7.0 Edition sparc
Suse ≫ Suse Linux Version 7.0 Update alpha
Suse ≫ Suse Linux Version 7.1
Suse ≫ Suse Linux Version 7.1 Edition spa
Suse ≫ Suse Linux Version 7.1 Edition sparc
Suse ≫ Suse Linux Version 7.1 Edition x86
Suse ≫ Suse Linux Version 7.1 Update alpha
Suse ≫ Suse Linux Version 7.2
Suse ≫ Suse Linux Version 7.2 Edition i386
Suse ≫ Suse Linux Version 7.3
Suse ≫ Suse Linux Version 7.3 Edition i386
Suse ≫ Suse Linux Version 7.3 Edition ppc
Suse ≫ Suse Linux Version 7.3 Edition sparc
Suse ≫ Suse Linux Version 8.0
Suse ≫ Suse Linux Version 8.0 Edition i386
Suse ≫ Suse Linux Version 8.1
Suse ≫ Suse Linux Version 8.2
Suse ≫ Suse Linux Version 9.0
Suse ≫ Suse Linux Version 9.0 Edition x86_64
Suse ≫ Suse Linux Version 9.1
Suse ≫ Suse Linux Version 9.1 Edition x86_64
Suse ≫ Suse Linux Version 9.2
Suse ≫ Suse Linux Version 9.2 Edition x86_64
Suse ≫ Suse Linux Version 9.3
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.6% 0.88
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.debian.org/security/2005/dsa-695
Vendor Advisory
http://bugs.gentoo.org/show_bug.cgi?id=79762
Vendor Advisory
http://secunia.com/advisories/14459
Patch
Vendor Advisory
http://secunia.com/advisories/14462
Vendor Advisory
http://security.gentoo.org/glsa/glsa-200503-05.xml
Vendor Advisory
http://support.avaya.com/elmodocs2/security/ASA-2005-134_RHSA-2005-332.pdf
http://www.osvdb.org/14365
http://www.redhat.com/support/errata/RHSA-2005-332.html
http://www.securityfocus.com/archive/1/433935/30/5010/threaded
http://www.securityfocus.com/bid/12712
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10898