RHEL 2.1 / 3 / 4 : netpbm (RHSA-2005:743)

High Nessus Plugin ID 19488


The remote Red Hat host is missing one or more security updates.


Updated netpbm packages that fix a security issue are now available.

This update has been rated as having low security impact by the Red Hat Security Response Team.

The netpbm package contains a library of functions that support programs for handling various graphics file formats, including .pbm (portable bitmaps), .pgm (portable graymaps), .pnm (portable anymaps), .ppm (portable pixmaps) and others.

A bug was found in the way netpbm converts PostScript files into PBM, PGM or PPM files. An attacker could create a carefully crafted PostScript file in such a way that it could execute arbitrary commands when the file is processed by a victim using pstopnm. The Common Vulnerabilities and Exposures project assigned the name CVE-2005-2471 to this issue.

All users of netpbm should upgrade to the updated packages, which contain a backported patch to resolve this issue.


Update the affected netpbm, netpbm-devel and / or netpbm-progs packages.

See Also




Plugin Details

Severity: High

ID: 19488

File Name: redhat-RHSA-2005-743.nasl

Version: $Revision: 1.18 $

Type: local

Agent: unix

Published: 2005/08/23

Modified: 2016/12/28

Dependencies: 12634

Risk Information

Risk Factor: High


Base Score: 7.5

Temporal Score: 6.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Temporal Vector: CVSS2#E:ND/RL:OF/RC:ND

Vulnerability Information

CPE: p-cpe:/a:redhat:enterprise_linux:netpbm, p-cpe:/a:redhat:enterprise_linux:netpbm-devel, p-cpe:/a:redhat:enterprise_linux:netpbm-progs, cpe:/o:redhat:enterprise_linux:2.1, cpe:/o:redhat:enterprise_linux:3, cpe:/o:redhat:enterprise_linux:4

Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list, Host/cpu

Exploit Available: true

Exploit Ease: No exploit is required

Patch Publication Date: 2005/08/22

Vulnerability Publication Date: 2005/07/24

Reference Information

CVE: CVE-2005-2471

BID: 14379, 15128

OSVDB: 18253

RHSA: 2005:743