CVE-2005-0638 Command injection in n/a

High 7.5 Published 4 Mar 2005 Updated 7 Aug 2024

Attackers can execute arbitrary commands via shell metacharacters in filenames when viewing compressed images in xloadimage or xli.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Local or same network only
Victim action needed: A user has to click or open something
Fix: Available

What is CVE-2005-0638?

CVE-2005-0638 is a high-severity command injection vulnerability in Suse Suse Linux, published on 4 Mar 2005. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.

Official description

xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbitrary commands via shell metacharacters in filenames for compressed images, which are not properly quoted when calling the gunzip command.

Which versions are affected by CVE-2005-0638?

It affects 3 products.

Linux distribution packages (16)

`xloadimage` Red Hat:enterprise_linux:3::as	All versions	`0:4.1-34.RHEL3`
`xloadimage-debuginfo` Red Hat:enterprise_linux:3::as	All versions	`0:4.1-34.RHEL3`
`xloadimage` Red Hat:enterprise_linux:3::desktop	All versions	`0:4.1-34.RHEL3`
`xloadimage-debuginfo` Red Hat:enterprise_linux:3::desktop	All versions	`0:4.1-34.RHEL3`
`xloadimage` Red Hat:enterprise_linux:3::es	All versions	`0:4.1-34.RHEL3`
`xloadimage-debuginfo` Red Hat:enterprise_linux:3::es	All versions	`0:4.1-34.RHEL3`
`xloadimage` Red Hat:enterprise_linux:3::ws	All versions	`0:4.1-34.RHEL3`
`xloadimage-debuginfo` Red Hat:enterprise_linux:3::ws	All versions	`0:4.1-34.RHEL3`
`xloadimage` Red Hat:enterprise_linux:4::as	All versions	`0:4.1-34.RHEL4`
`xloadimage-debuginfo` Red Hat:enterprise_linux:4::as	All versions	`0:4.1-34.RHEL4`
`xloadimage` Red Hat:enterprise_linux:4::desktop	All versions	`0:4.1-34.RHEL4`
`xloadimage-debuginfo` Red Hat:enterprise_linux:4::desktop	All versions	`0:4.1-34.RHEL4`
`xloadimage` Red Hat:enterprise_linux:4::es	All versions	`0:4.1-34.RHEL4`
`xloadimage-debuginfo` Red Hat:enterprise_linux:4::es	All versions	`0:4.1-34.RHEL4`
`xloadimage` Red Hat:enterprise_linux:4::ws	All versions	`0:4.1-34.RHEL4`
`xloadimage-debuginfo` Red Hat:enterprise_linux:4::ws	All versions	`0:4.1-34.RHEL4`

Products include Altlinux Alt Linux, Suse Suse Linux, Xli Xli.

How do I fix CVE-2005-0638?

Upgrade to a fixed version.

Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.

Is CVE-2005-0638 being exploited?

There is no known exploitation of CVE-2005-0638 in the wild and no public exploit code.

All Suse Suse Linux vulnerabilities

Sources

Also known as DEBIAN-CVE-2005-0638, GHSA-r884-j2c4-8c9q, RHSA-2005:332.