CVE-2008-4640

The DoCommand function in jhead.c in Matthias Wandel jhead 2.84 and earlier allows local users to delete arbitrary files via vectors involving a modified input filename in which (1) a final "z" character is replaced by a "t" character or (2) a final "t" character is replaced by a "z" character.

Link	Resource
http://www.openwall.com/lists/oss-security/2008/10/16/3
https://bugs.launchpad.net/ubuntu/+source/jhead/+bug/271020
http://www.securityfocus.com/bid/32506
http://www.openwall.com/lists/oss-security/2008/11/26/4

Configuration 1

cpe:2.3:a:sentex:jhead:2.6:*:*:*:*:*:*:* cpe:2.3:a:sentex:jhead:1.5:*:*:*:*:*:*:* cpe:2.3:a:sentex:jhead:2.3:*:*:*:*:*:*:* cpe:2.3:a:sentex:jhead:2.5:*:*:*:*:*:*:* cpe:2.3:a:sentex:jhead:1.3:*:*:*:*:*:*:* cpe:2.3:a:sentex:jhead:2.4-2:*:*:*:*:*:*:* cpe:2.3:a:sentex:jhead:1.2:*:*:*:*:*:*:* cpe:2.3:a:sentex:jhead:1.8:*:*:*:*:*:*:* cpe:2.3:a:sentex:jhead:2.0:*:*:*:*:*:*:* cpe:2.3:a:sentex:jhead:2.7:*:*:*:*:*:*:* cpe:2.3:a:sentex:jhead:2.4-1:*:*:*:*:*:*:* cpe:2.3:a:sentex:jhead:1.6:*:*:*:*:*:*:* cpe:2.3:a:sentex:jhead:2.4:*:*:*:*:*:*:* cpe:2.3:a:sentex:jhead:1.9:*:*:*:*:*:*:* cpe:2.3:a:sentex:jhead:1.7:*:*:*:*:*:*:* cpe:2.3:a:sentex:jhead:1.4:*:*:*:*:*:*:* cpe:2.3:a:sentex:jhead:2.1:*:*:*:*:*:*:* cpe:2.3:a:sentex:jhead:*:*:*:*:*:*:*:* cpe:2.3:a:sentex:jhead:2.8:*:*:*:*:*:*:* cpe:2.3:a:sentex:jhead:2.2:*:*:*:*:*:*:*

---

Published : 2008-10-21 06:00

Updated : 2008-12-03 06:45

---

NVD link : CVE-2008-4640

Mitre link : CVE-2008-4640

No products.

CWE-20

NVD-CWE-noinfo