NVD

Id
4454  
Name
CVE-2008-4640  
Description
The DoCommand function in jhead.c in Matthias Wandel jhead 2.84 and earlier allows local users to delete arbitrary files via vectors involving a modified input filename in which (1) a final "z" character is replaced by a "t" character or (2) a final "t" character is replaced by a "z" character.  
Reject
 
CVSS Version
2  
CVSS Score
3.6  
Severity
Low  
CVSS Base Score
3.6  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-10-21  
Modified Date
2008-12-03  
Seq
2008-4640  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
28067 4454 CVE-2008-4640 [oss-security] 20081016 Re: CVE request: jhead  View
28068 4454 CVE-2008-4640 [oss-security] 20081127 Re: CVE request: jhead  View
28069 4454 CVE-2008-4640 32506  View
28070 4454 CVE-2008-4640 https://bugs.launchpad.net/ubuntu/+source/jhead/+bug/271020  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51018 JVNDB-2008-006328 Matthias Wandel jhead の jhead.c における任意のファイルを削除される脆弱性 Matthias Wandel jhead の jhead.c の DoCommand 関数は、(1) 最後の "z" 文字が "t" 文字に、または (2) 最後の "t" 文字が "z" 文字に置換され、変更された入力ファイル名に関する処理に不備があるため、任意のファイルを削除される脆弱性が存在します。 CVE-2008-4640 34753 CVE-2008-4640 4454 3.6 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-006328.html 2008-10-21 2012-12-20 View