CVE:CVE-2005-0638
CNNVD:CNNVD-200503-042
远程攻击者可以借助xloadimage 4.1-r2之前版本和xli 1.17之前版本，通过压缩图像文件名中的shell元字符执行任意命令，而这些元字符在调用gunzip指令时没有正确引用。
solution:Upgrade xli xli to a higher version than 1.14,1.15,1.16,1.17,and avoid the version 1.14,1.15,1.16,1.17; Upgrade altlinux alt_linux to a higher version than 2.3,and avoid the version 2.3; Upgrade suse suse_linux to a higher version than 1.0,2.0,3.0,4.0,4.2,4.3,4.4,4.4.1,5.0,5.1,5.2,5.3,6.0,6.1,6.1:alpha,6.2,6.3,6.3:alpha,6.4,6.4:alpha,7.0,7.0:alpha,7.1,7.1:alpha,7.2,7.3,8.0,8.1,8.2,9.0,9.1,9.2,9.3,and avoid the version 1.0,2.0,3.0,4.0,4.2,4.3,4.4,4.4.1,5.0,5.1,5.2,5.3,6.0,6.1,6.1:alpha,6.2,6.3,6.3:alpha,6.4,6.4:alpha,7.0,7.0:alpha,7.1,7.1:alpha,7.2,7.3,8.0,8.1,8.2,9.0,9.1,9.2,9.3