CVE-2008-4639

jhead.c in Matthias Wandel jhead 2.84 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file.

Link	Resource
https://bugs.launchpad.net/ubuntu/+source/jhead/+bug/271020
http://www.openwall.com/lists/oss-security/2008/10/15/6
http://www.openwall.com/lists/oss-security/2008/10/15/5
http://www.openwall.com/lists/oss-security/2008/10/16/3
http://www.openwall.com/lists/oss-security/2009/02/06/5

Configuration 1

cpe:2.3:a:sentex:jhead:2.6:*:*:*:*:*:*:* cpe:2.3:a:sentex:jhead:*:*:*:*:*:*:*:* cpe:2.3:a:sentex:jhead:2.82:*:*:*:*:*:*:* cpe:2.3:a:sentex:jhead:1.5:*:*:*:*:*:*:* cpe:2.3:a:sentex:jhead:2.3:*:*:*:*:*:*:* cpe:2.3:a:sentex:jhead:2.5:*:*:*:*:*:*:* cpe:2.3:a:sentex:jhead:1.3:*:*:*:*:*:*:* cpe:2.3:a:sentex:jhead:2.4-2:*:*:*:*:*:*:* cpe:2.3:a:sentex:jhead:1.2:*:*:*:*:*:*:* cpe:2.3:a:sentex:jhead:1.8:*:*:*:*:*:*:* cpe:2.3:a:sentex:jhead:2.0:*:*:*:*:*:*:* cpe:2.3:a:sentex:jhead:2.7:*:*:*:*:*:*:* cpe:2.3:a:sentex:jhead:2.4-1:*:*:*:*:*:*:* cpe:2.3:a:sentex:jhead:1.6:*:*:*:*:*:*:* cpe:2.3:a:sentex:jhead:2.4:*:*:*:*:*:*:* cpe:2.3:a:sentex:jhead:1.9:*:*:*:*:*:*:* cpe:2.3:a:sentex:jhead:1.7:*:*:*:*:*:*:* cpe:2.3:a:sentex:jhead:1.4:*:*:*:*:*:*:* cpe:2.3:a:sentex:jhead:2.1:*:*:*:*:*:*:* cpe:2.3:a:sentex:jhead:2.8:*:*:*:*:*:*:* cpe:2.3:a:sentex:jhead:2.2:*:*:*:*:*:*:*

---

Published : 2008-10-21 06:00

Updated : 2010-12-28 05:00

---

NVD link : CVE-2008-4639

Mitre link : CVE-2008-4639

No products.

CWE-59

NVD-CWE-noinfo