Lucene search
Ubuntu.comUB:CVE-2005-0638HistoryMar 02, 2005 - 12:00 a.m.
CVE-2005-0638
2005-03-0200:00:00
ubuntu.com
ubuntu.com
17
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
0.008
Percentile
81.2%
xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute
arbitrary commands via shell metacharacters in filenames for compressed
images, which are not properly quoted when calling the gunzip command.
Related
redhat
redhat
(RHSA-2005:332) xloadimage security update
2005-04-19 00:00:00
nessus
nessus
CentOS 3 : xloadimage (CESA-2005:332-01)
2013-06-29 00:00:00
FreeBSD : xloadimage -- arbitrary command execution when handling compressed files (310d0087-0fde-4929-a41f-96f17c5adffe)
2005-07-13 00:00:00
CentOS 3 / 4 : xloadimage (CESA-2005:332)
2006-07-05 00:00:00
centos
centos
xloadimage security update
2005-04-19 20:36:56
xloadimage security update
2005-04-20 00:48:53
openvas
openvas
FreeBSD Ports: xli
2008-09-04 00:00:00
FreeBSD Ports: xli
2008-09-04 00:00:00
Debian Security Advisory DSA 694-1 (xloadimage)
2008-01-17 00:00:00
cve
cve
CVE-2005-0638
2005-03-04 05:00:00
cvelist
cvelist
CVE-2005-0638
2005-03-04 05:00:00
freebsd
freebsd
xloadimage -- arbitrary command execution when handling compressed files
2005-02-18 00:00:00
nvd
nvd
CVE-2005-0638
2005-03-02 05:00:00
debiancve
debiancve
CVE-2005-0638
2005-03-04 05:00:00
debian
debian
[SECURITY] [DSA 694-1] New xloadimage packages fix several vulnerabilities
2005-03-21 10:14:23
[SECURITY] [DSA 695-1] New xli packages fix several vulnerabilities
2005-03-21 14:09:27
[SECURITY] [DSA 694-1] New xloadimage packages fix several vulnerabilities
2005-03-21 10:14:23
osv
osv
xloadimage - missing input sanitising, integer overflow
2005-03-21 00:00:00
xli - buffer overflow, input sanitising, integer overflow
2005-03-21 00:00:00
gentoo
gentoo
xli, xloadimage: Multiple vulnerabilities
2005-03-02 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 695-1] New xli packages fix several vulnerabilities
2005-03-22 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
0.008
Percentile
81.2%
Related for UB:CVE-2005-0638