CVE-2005-0638: High severity xli xli vulnerability
Published Mar 2, 2005
·Updated
xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbitrary commands via shell metacharacters in filenames for compressed images, which are not properly quoted when calling the gunzip command.
Affected Software
56 affected components
xli xli=1.17
xli xli=1.16
xli xli=1.14
xli xli=1.15
SUSE SuSE Linux=6.2
SUSE SuSE Linux=6.3
SUSE SuSE Linux=9.3
SUSE SuSE Linux=4.0
SUSE SuSE Linux=7.1
SUSE SuSE Linux=9.2
SUSE SuSE Linux=9.1
SUSE SuSE Linux=9.0
SUSE SuSE Linux=7.1-alpha
SUSE SuSE Linux=8.2
Altlinux Alt Linux=2.3
SUSE SuSE Linux=9.0
SUSE SuSE Linux=6.3-alpha
SUSE SuSE Linux=7.3
SUSE SuSE Linux=5.0
SUSE SuSE Linux=4.4.1
SUSE SuSE Linux=7.2
SUSE SuSE Linux=8.0
SUSE SuSE Linux=7.0
SUSE SuSE Linux=5.2
SUSE SuSE Linux=3.0
SUSE SuSE Linux=6.0
SUSE SuSE Linux=6.4
SUSE SuSE Linux=7.3
SUSE SuSE Linux=7.0
SUSE SuSE Linux=6.1-alpha
SUSE SuSE Linux=7.0
SUSE SuSE Linux=1.0
SUSE SuSE Linux=6.1
SUSE SuSE Linux=8.0
SUSE SuSE Linux=9.1
SUSE SuSE Linux=6.4
Altlinux Alt Linux=2.3
SUSE SuSE Linux=7.0-alpha
SUSE SuSE Linux=4.3
SUSE SuSE Linux=4.4
SUSE SuSE Linux=5.1
SUSE SuSE Linux=7.0
SUSE SuSE Linux=7.1
SUSE SuSE Linux=6.3
SUSE SuSE Linux=6.4
SUSE SuSE Linux=4.2
SUSE SuSE Linux=7.1
SUSE SuSE Linux=6.4-alpha
SUSE SuSE Linux=7.2
SUSE SuSE Linux=2.0
SUSE SuSE Linux=7.3
SUSE SuSE Linux=7.3
SUSE SuSE Linux=9.2
SUSE SuSE Linux=5.3
SUSE SuSE Linux=7.1
SUSE SuSE Linux=8.1
Remediation
Patch Available
Event History
Mar 2, 2005
CVE Published
05:00 AM
Mar 4, 2005
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-0638?
CVE-2005-0638 is classified as a critical vulnerability due to its capability to allow remote attackers to execute arbitrary commands.
2
How do I fix CVE-2005-0638?
To mitigate CVE-2005-0638, upgrade to xloadimage version 4.1-r2 or later, or xli version 1.17 or later.
3
What software is affected by CVE-2005-0638?
CVE-2005-0638 affects xloadimage versions before 4.1-r2 and xli versions before 1.17, among others.
4
What types of attacks can CVE-2005-0638 enable?
CVE-2005-0638 can enable attackers to execute arbitrary commands via shell metacharacters in filenames.
5
Is CVE-2005-0638 a local or remote vulnerability?
CVE-2005-0638 is a remote vulnerability that can be exploited from outside the target system.