CVE-2005-0638

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-03-02 · updated 2026-06-16

Description

xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbitrary commands via shell metacharacters in filenames for compressed images, which are not properly quoted when calling the gunzip command.

Affected products

Altlinux Alt Linux: 2.3
Suse Linux: 1.0, 2.0, 3.0, 4.0, 4.2, 4.3 (+27)
Xli: 1.14, 1.15, 1.16, 1.17

References

http://bugs.gentoo.org/show_bug.cgi?id=79762
http://secunia.com/advisories/14459
http://secunia.com/advisories/14462
http://security.gentoo.org/glsa/glsa-200503-05.xml
http://support.avaya.com/elmodocs2/security/ASA-2005-134_RHSA-2005-332.pdf
http://www.debian.org/security/2005/dsa-695
http://www.osvdb.org/14365
http://www.redhat.com/support/errata/RHSA-2005-332.html
http://www.securityfocus.com/archive/1/433935/30/5010/threaded
http://www.securityfocus.com/bid/12712
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10898
http://bugs.gentoo.org/show_bug.cgi?id=79762

Get alerted when CVE-2005-0638 or the next vulnerability affects your stack