← Back

CVE-2008-4640

nvd nist
Published: Oct 21, 2008Modified: Apr 23, 2026

JSON object

Loading...
3.6
Vector
AV:L/AC:L/Au:N/C:N/I:P/A:P
Exploitability: 3.9 / Impact: 4.9
Source: NVD

Description

The DoCommand function in jhead.c in Matthias Wandel jhead 2.84 and earlier allows local users to delete arbitrary files via vectors involving a modified input filename in which (1) a final "z" character is replaced by a "t" character or (2) a final "t" character is replaced by a "z" character.

Affected (20)

Products: Sentex: Jhead
1 product
Jhead
Configuration A
20 vulnerable
Vulnerable SoftwareAffected Versions
Sentex
version ≤ 2.82
Version 1.2
Version 1.3
Version 1.4
Version 1.5
Version 1.6
Version 1.7
Version 1.8
Version 1.9
Version 2.0
Version 2.1
Version 2.2
Version 2.3
Version 2.4-1
Version 2.4-2
Version 2.4
Version 2.5
Version 2.6
Version 2.7
Version 2.8

Timeline

No history available yet.