FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2005-0638

This CVE name corresponds to:

Entered	Topic
2005-06-03	xloadimage -- arbitrary command execution when handling compressed files

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2005-0638 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2005-0638
Phase	Assigned(20050304)

Description

xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbitrary commands via shell metacharacters in filenames for compressed images, which are not properly quoted when calling the gunzip command.

References

Source	Reference
CONFIRM	http://support.avaya.com/elmodocs2/security/ASA-2005-134_RHSA-2005-332.pdf
DEBIAN	DSA-695
FEDORA	FLSA-2006:152923
GENTOO	GLSA-200503-05
CONFIRM	http://bugs.gentoo.org/show_bug.cgi?id=79762
REDHAT	RHSA-2005:332
BID	12712
OSVDB	14365
OVAL	oval:org.mitre.oval:def:10898
SECUNIA	14459
SECUNIA	14462