CVE-2005-0638
xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbitrary commands via...
xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbitrary commands via shell metacharacters in filenames for compressed images, which are not properly quoted when calling the gunzip command.
Exploit likelihood
What each source reports
NVD Score used
xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbitrary commands via shell metacharacters in filenames for compressed images, which are not properly quoted when calling the gunzip command.
- Record
CVE-2005-0638- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbitrary commands via shell metacharacters in filenames for compressed images, which are not properly quoted when calling the gunzip command.
- Record
CVE-2005-0638- Updated
- 2026-11-02
EUVDEUVD-2005-0639 No score
xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbitrary commands via shell metacharacters in filenames for compressed images, which are not properly quoted when calling the gunzip command.
- Record
EUVD-2005-0639- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-r884-j2c4-8c9q No score
xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbitrary commands via...
xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbitrary commands via shell metacharacters in filenames for compressed images, which are not properly quoted when calling the gunzip command.
- Record
GHSA-r884-j2c4-8c9q- Updated
- 2026-11-02
OSV No score
xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbitrary commands via shell metacharacters in filenames for compressed images, which are not properly quoted when calling the gunzip command.
- Record
CVE-2005-0638- Updated
- 2026-11-02
OSVDEBIAN-CVE-2005-0638 No score
xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbitrary commands via shell metacharacters in filenames for compressed images, which are not properly quoted when calling the gunzip command.
- Record
DEBIAN-CVE-2005-0638- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
xliDebian:12 |
before 1.17.0-18 | 1.17.0-18 |
xliDebian:13 |
before 1.17.0-18 | 1.17.0-18 |
xliDebian:14 |
before 1.17.0-18 | 1.17.0-18 |
xloadimageDebian:12 |
before 4.1-14.1 | 4.1-14.1 |
xloadimageDebian:13 |
before 4.1-14.1 | 4.1-14.1 |
xloadimageDebian:14 |
before 4.1-14.1 | 4.1-14.1 |
xloadimageDebian:3.0 |
before 4.1-10woody1, plus listed versions 4.1-10 |
4.1-10woody1 |
xliDebian:3.0 |
before 1.17.0-11woody1, plus listed versions 1.17.0-11 |
1.17.0-11woody1 |
xloadimageRed Hat:enterprise_linux:3::as |
before 0:4.1-34.RHEL3 | 0:4.1-34.RHEL3 |
xloadimage-debuginfoRed Hat:enterprise_linux:3::as |
before 0:4.1-34.RHEL3 | 0:4.1-34.RHEL3 |
Show 14 moreShow less
| Package | Affected | Fixed |
|---|---|---|
xloadimageRed Hat:enterprise_linux:3::desktop |
before 0:4.1-34.RHEL3 | 0:4.1-34.RHEL3 |
xloadimage-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:4.1-34.RHEL3 | 0:4.1-34.RHEL3 |
xloadimageRed Hat:enterprise_linux:3::es |
before 0:4.1-34.RHEL3 | 0:4.1-34.RHEL3 |
xloadimage-debuginfoRed Hat:enterprise_linux:3::es |
before 0:4.1-34.RHEL3 | 0:4.1-34.RHEL3 |
xloadimageRed Hat:enterprise_linux:3::ws |
before 0:4.1-34.RHEL3 | 0:4.1-34.RHEL3 |
xloadimage-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:4.1-34.RHEL3 | 0:4.1-34.RHEL3 |
xloadimageRed Hat:enterprise_linux:4::as |
before 0:4.1-34.RHEL4 | 0:4.1-34.RHEL4 |
xloadimage-debuginfoRed Hat:enterprise_linux:4::as |
before 0:4.1-34.RHEL4 | 0:4.1-34.RHEL4 |
xloadimageRed Hat:enterprise_linux:4::desktop |
before 0:4.1-34.RHEL4 | 0:4.1-34.RHEL4 |
xloadimage-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:4.1-34.RHEL4 | 0:4.1-34.RHEL4 |
xloadimageRed Hat:enterprise_linux:4::es |
before 0:4.1-34.RHEL4 | 0:4.1-34.RHEL4 |
xloadimage-debuginfoRed Hat:enterprise_linux:4::es |
before 0:4.1-34.RHEL4 | 0:4.1-34.RHEL4 |
xloadimageRed Hat:enterprise_linux:4::ws |
before 0:4.1-34.RHEL4 | 0:4.1-34.RHEL4 |
xloadimage-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:4.1-34.RHEL4 | 0:4.1-34.RHEL4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-0638 is a high vulnerability (CVSS 7.5) in Xli, published March 2, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.60%, the 89th percentile. Fixed in xli 1.17.0-18.
References
securityfocus.com/bid/12712
security.gentoo.org/glsa/glsa-200503-05.xml
secunia.com/advisories/14459
bugs.gentoo.org/show_bug.cgi?id=79762
debian.org/security/2005/dsa-695
redhat.com/support/errata/RHSA-2005-332.html
Show 17 moreShow less
support.avaya.com/elmodocs2/security/ASA-2005-134_RHSA-2005-332.pdf
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10898
osvdb.org/14365
nvd.nist.gov/vuln/detail/CVE-2005-0638
github.com/advisories/GHSA-r884-j2c4-8c9q
security-tracker.debian.org/tracker/CVE-2005-0638
access.redhat.com/errata/RHSA-2005:332
bugzilla.redhat.com/show_bug.cgi?id=70867
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_332.json
cve.org/CVERecord?id=CVE-2005-0638