PT-2005-3376 · Netpbm+2 · Netpbm+2

Max Vozeler · Publicado 2005-08-05 · Atualizado 2017-10-11 · CVE-2005-2471

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions netpbm (affected versions not specified)

Description The issue concerns the pstopnm function in netpbm, which fails to properly utilize the "-dSAFER" option when invoking Ghostscript for converting PostScript files into PBM, PGM, or PNM files. This oversight enables external attackers, with user assistance, to execute arbitrary commands.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2005-2471

DSA-1021-1

RHSA-2005:743

RHSA-2005_743

Produtos afetados

Ghostscript

Red Hat

Netpbm

Referências · 19

• https://nvd.nist.gov/vuln/detail/CVE-2005-2471 · Nota de Segurança
• http://secunia.com/advisories/19436 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-2471 · Aviso do Fabricante
• http://debian.org/security/2006/dsa-1021 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/21500 · Nota
• http://trustix.org/errata/2005/0038 · Aviso do Fabricante
• https://rhn.redhat.com/errata/RHSA-2005-743.html · Nota
• https://redhat.com/security/data/cve/CVE-2005-2471.html · Nota
• http://redhat.com/support/errata/RHSA-2005-743.html · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2005-2471 · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11645 · Nota
• http://securitytracker.com/id?1014752 · Nota
• http://osvdb.org/18253 · Nota
• https://osv.dev/vulnerability/CVE-2005-2471 · Aviso do Fabricante
• http://securityfocus.com/bid/14379 · Nota