CVE-2008-4640

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2008-4640

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2008-4640.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2008-4640

Downstream

DEBIAN-CVE-2008-4640

Published

2008-10-21T18:00:01Z

Modified

2026-04-10T03:40:18.992382Z

Summary

[none]

Details

The DoCommand function in jhead.c in Matthias Wandel jhead 2.84 and earlier allows local users to delete arbitrary files via vectors involving a modified input filename in which (1) a final "z" character is replaced by a "t" character or (2) a final "t" character is replaced by a "z" character.

References

http://www.openwall.com/lists/oss-security/2008/10/16/3
http://www.openwall.com/lists/oss-security/2008/11/26/4
http://www.securityfocus.com/bid/32506
https://bugs.launchpad.net/ubuntu/+source/jhead/+bug/271020

CVE-2008-4640

Affected packages