CVE-2005-0638
Fixed in a distro release EPSS 4%
xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbitrary commands via shell metacharacters in filenames for compressed images, which are not properly quoted when calling the gunzip command.
Products: xli, altlinux alt_linux, suse_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | xli | 1.17.0-18 |
| Debian 12 | xloadimage | 4.1-14.1 |
| Debian 13 | xli | 1.17.0-18 |
| Debian 13 | xloadimage | 4.1-14.1 |
| Debian 14 | xli | 1.17.0-18 |
| Debian 14 | xloadimage | 4.1-14.1 |
| Debian 3.0 | xli | 1.17.0-11woody1 |
| Debian 3.0 | xloadimage | 4.1-10woody1 |
| Red Hat Enterprise Linux 3 | xloadimage | 0:4.1-34.RHEL3 |
| Red Hat Enterprise Linux 3 | xloadimage-debuginfo | 0:4.1-34.RHEL3 |
| Red Hat Enterprise Linux 4 | xloadimage | 0:4.1-34.RHEL4 |
| Red Hat Enterprise Linux 4 | xloadimage-debuginfo | 0:4.1-34.RHEL4 |