CVE-2008-4640

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2008-4640

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2008-4640.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2008-4640

Published

2008-10-21T18:00:01Z

Modified

2024-11-21T00:52:10Z

Summary

[none]

Details

The DoCommand function in jhead.c in Matthias Wandel jhead 2.84 and earlier allows local users to delete arbitrary files via vectors involving a modified input filename in which (1) a final "z" character is replaced by a "t" character or (2) a final "t" character is replaced by a "z" character.

References

Affected packages

Debian:11 / jhead

Package

Name: jhead
Purl: pkg:deb/debian/jhead?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.85-1

Ecosystem specific

{
    "urgency": "unimportant"
}

Debian:12 / jhead

Package

Name: jhead
Purl: pkg:deb/debian/jhead?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.85-1

Ecosystem specific

{
    "urgency": "unimportant"
}

Debian:13 / jhead

Package

Name: jhead
Purl: pkg:deb/debian/jhead?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.85-1

Ecosystem specific

{
    "urgency": "unimportant"
}