Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2005-2471
HistoryAug 05, 2005 - 4:00 a.m.

CVE-2005-2471

2005-08-0504:00:00
NVD-CWE-Other
[email protected]
web.nvd.nist.gov
30
cve-2005-2471
netpbm
pstopnm
ghostscript
command execution
vulnerability

6.8 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.021 Low

EPSS

Percentile

88.9%

JSON

pstopnm in netpbm does not properly use the “-dSAFER” option when calling Ghostscript to convert a PostScript file into a (1) PBM, (2) PGM, or (3) PNM file, which allows external user-assisted attackers to execute arbitrary commands.

CPENameOperatorVersion
netpbm:netpbmnetpbmeq2.10.0.8

Related

openvas 6
osv 1
redhat 1
nessus 6
centos 3
ubuntu 1
debiancve 1
gentoo 1
ubuntucve 1
debian 1
openvas
openvas
Gentoo Security Advisory GLSA 200508-04 (Netpbm)
2008-09-24 00:00:00
SLES9: Security update for netpbm and libnetpbm
2009-10-10 00:00:00
Debian Security Advisory DSA 1021-1 (netpbm-free)
2008-01-17 00:00:00
osv
osv
netpbm-free - insecure program execution
2006-03-28 00:00:00
redhat
redhat
(RHSA-2005:743) netpbm security update
2005-08-22 00:00:00
nessus
nessus
Mandrake Linux Security Advisory : netpbm (MDKSA-2005:133)
2005-10-05 00:00:00
RHEL 2.1 / 3 / 4 : netpbm (RHSA-2005:743)
2005-08-23 00:00:00
Ubuntu 4.10 / 5.04 : netpbm-free vulnerability (USN-164-1)
2006-01-15 00:00:00
centos
centos
X11, netpbm, vim security update
2005-08-22 15:17:59
netpbm security update
2005-08-22 15:16:50
netpbm security update
2005-08-22 23:25:00
ubuntu
ubuntu
netpbm vulnerability
2005-08-11 00:00:00
debiancve
debiancve
CVE-2005-2471
2005-08-05 04:00:00
gentoo
gentoo
Netpbm: Arbitrary code execution in pstopnm
2005-08-05 00:00:00
ubuntucve
ubuntucve
CVE-2005-2471
2005-08-05 00:00:00
debian
debian
[SECURITY] [DSA 1021-1] New netpbm-free packages fix arbitrary command execution
2006-03-28 17:04:51

6.8 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.021 Low

EPSS

Percentile

88.9%

JSON
Related for CVE-2005-2471
openvas6osv1redhat1nessus6centos3ubuntu1debiancve1gentoo1ubuntucve1debian1