Command Execution Vulnerability in Netpbm by Graphic Software Company
CVE-2005-2471

Currently unrated

Key Information:

Vendor: Netpbm
Status: Netpbm
Vendor: CVE Published:; 5 August 2005

What is CVE-2005-2471?

The Netpbm toolkit has a vulnerability where it fails to securely implement the '-dSAFER' option while calling Ghostscript for converting PostScript files. This security loophole allows attackers to manipulate inputs, leading to the execution of arbitrary commands on affected systems. Users are advised to patch their installations to mitigate risks associated with potential exploitation.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/21500

vdb-entryx_refsource_XF

http://www.securityfocus.com/bid/14379

vdb-entryx_refsource_BID

http://www.novell.com/linux/security/advisories/2005_19_s...

vendor-advisoryx_refsource_SUSE

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Aug 5, 2005
Vulnerability Reserved
Aug 5, 2005

CVE-2005-2471 Data

JSON