CVE-2008-4641

The DoCommand function in jhead.c in Matthias Wandel jhead 2.84 and earlier allows attackers to execute arbitrary commands via shell metacharacters in unspecified input.

Link	Resource
http://www.openwall.com/lists/oss-security/2008/10/15/6
http://www.openwall.com/lists/oss-security/2008/10/15/5
http://www.openwall.com/lists/oss-security/2008/10/16/3
https://bugs.launchpad.net/ubuntu/+source/jhead/+bug/271020
http://www.securityfocus.com/bid/31921
http://www.openwall.com/lists/oss-security/2008/11/26/4

Configuration 1

cpe:2.3:a:sentex:jhead:2.6:*:*:*:*:*:*:* cpe:2.3:a:sentex:jhead:1.5:*:*:*:*:*:*:* cpe:2.3:a:sentex:jhead:2.3:*:*:*:*:*:*:* cpe:2.3:a:sentex:jhead:2.5:*:*:*:*:*:*:* cpe:2.3:a:sentex:jhead:1.3:*:*:*:*:*:*:* cpe:2.3:a:sentex:jhead:2.4-2:*:*:*:*:*:*:* cpe:2.3:a:sentex:jhead:1.2:*:*:*:*:*:*:* cpe:2.3:a:sentex:jhead:1.8:*:*:*:*:*:*:* cpe:2.3:a:sentex:jhead:2.0:*:*:*:*:*:*:* cpe:2.3:a:sentex:jhead:2.7:*:*:*:*:*:*:* cpe:2.3:a:sentex:jhead:2.4-1:*:*:*:*:*:*:* cpe:2.3:a:sentex:jhead:1.6:*:*:*:*:*:*:* cpe:2.3:a:sentex:jhead:2.4:*:*:*:*:*:*:* cpe:2.3:a:sentex:jhead:1.9:*:*:*:*:*:*:* cpe:2.3:a:sentex:jhead:1.7:*:*:*:*:*:*:* cpe:2.3:a:sentex:jhead:1.4:*:*:*:*:*:*:* cpe:2.3:a:sentex:jhead:2.1:*:*:*:*:*:*:* cpe:2.3:a:sentex:jhead:*:*:*:*:*:*:*:* cpe:2.3:a:sentex:jhead:2.8:*:*:*:*:*:*:* cpe:2.3:a:sentex:jhead:2.2:*:*:*:*:*:*:*

---

Published : 2008-10-21 06:00

Updated : 2008-12-03 06:45

---

NVD link : CVE-2008-4641

Mitre link : CVE-2008-4641

No products.

CWE-20

NVD-CWE-noinfo