CVE-2005-2471

pstopnm in netpbm does not properly use the "-dSAFER" option when calling Ghostscript to convert a PostScript file into a (1) PBM, (2) PGM, or (3) PNM file, which allows external user-assisted attackers to execute arbitrary commands.

• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=319757
• http://secunia.com/advisories/16184Vendor Advisory
• http://secunia.com/advisories/18330Vendor Advisory
• http://secunia.com/advisories/19436Vendor Advisory
• http://securitytracker.com/id?1014752
• http://www.debian.org/security/2006/dsa-1021
• http://www.novell.com/linux/security/advisories/2005_19_sr.html
• http://www.osvdb.org/18253
• http://www.redhat.com/support/errata/RHSA-2005-743.html
• http://www.securityfocus.com/bid/14379
• http://www.trustix.org/errata/2005/0038/Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/21500
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11645
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=319757
• http://secunia.com/advisories/16184Vendor Advisory
• http://secunia.com/advisories/18330Vendor Advisory
• http://secunia.com/advisories/19436Vendor Advisory
• http://securitytracker.com/id?1014752
• http://www.debian.org/security/2006/dsa-1021
• http://www.novell.com/linux/security/advisories/2005_19_sr.html
• http://www.osvdb.org/18253
• http://www.redhat.com/support/errata/RHSA-2005-743.html
• http://www.securityfocus.com/bid/14379
• http://www.trustix.org/errata/2005/0038/Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/21500
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11645

Published

Aug 5, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-2465Cross-site scripting (XSS) vulnerability in pm.php in PCXP/T…
• CVE-2005-2466Multiple SQL injection vulnerabilities in the auth_user func…
• CVE-2005-2467Multiple cross-site scripting (XSS) vulnerabilities in MySQL…
• CVE-2005-2468Multiple SQL injection vulnerabilities in MySQL Eventum 1.5.…
• CVE-2005-2469Stack-based buffer overflow in the NMAP Agent for Novell Net…
• CVE-2005-2470Buffer overflow in a "core application plug-in" for Adobe Re…
• CVE-2005-2472Multiple buffer overflows in BusinessMail 4.60.00 allow remo…
• CVE-2005-2473Multiple SQL injection vulnerabilities in ChurchInfo allow r…
• CVE-2005-2474ChurchInfo allows remote attackers to execute obtain sensiti…
• CVE-2005-2475Race condition in Unzip 5.52 allows local users to modify pe…
• CVE-2005-2476Cross-site scripting (XSS) vulnerability in lost_passowrd.ph…
• CVE-2005-2477shop_display_products.php in Naxtor Shopping Cart 1.0 allows…