CVE-2005-0638

Public PoC / Exploit (1)

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbitrary commands via shell metacharacters in filenames for compressed images, which are not properly quoted when calling the gunzip command.

Affected Products (56)

xli · xlivulnerable

altlinux · alt_linuxvulnerable

suse · suse_linuxvulnerable

...and 6 more

References (20)

http://bugs.gentoo.org/show_bug.cgi?id=79762

Vendor Advisory

http://secunia.com/advisories/14459

PatchVendor Advisory

http://secunia.com/advisories/14462

Vendor Advisory

http://security.gentoo.org/glsa/glsa-200503-05.xml

Vendor Advisory

http://support.avaya.com/elmodocs2/security/ASA-2005-134_RHSA-2005-332.pdf

http://www.debian.org/security/2005/dsa-695

Vendor Advisory

http://www.osvdb.org/14365

http://www.redhat.com/support/errata/RHSA-2005-332.html

http://www.securityfocus.com/archive/1/433935/30/5010/threaded

http://www.securityfocus.com/bid/12712

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10898

http://bugs.gentoo.org/show_bug.cgi?id=79762

Vendor Advisory

http://secunia.com/advisories/14459

PatchVendor Advisory

http://secunia.com/advisories/14462

Vendor Advisory

http://security.gentoo.org/glsa/glsa-200503-05.xml

Vendor Advisory

http://support.avaya.com/elmodocs2/security/ASA-2005-134_RHSA-2005-332.pdf

http://www.debian.org/security/2005/dsa-695

Vendor Advisory

http://www.osvdb.org/14365

http://www.redhat.com/support/errata/RHSA-2005-332.html

http://www.securityfocus.com/archive/1/433935/30/5010/threaded