CVE-2008-4640

The DoCommand function in jhead.c in Matthias Wandel jhead 2.84 and earlier allows local users to delete arbitrary files via vectors involving a modified input…

published October 21, 2008

CVSS
—
EPSS
0%
Percentile
21.6
In the wild
Unconfirmed
What it is

The DoCommand function in jhead.c in Matthias Wandel jhead 2.84 and earlier allows local users to delete arbitrary files via vectors involving a modified input filename in which (1) a final "z" character is replaced by a "t" character or (2) a final "t" character is replaced by a "z" character.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00302 · 21.6th percentile
Published
2008-10-21T16:00Z
EPSS history
Timeline
  • 21 OCT 16:00Z
    The DoCommand function in jhead.c in Matthias Wandel jhead 2.84 and earlier allows local users to delete arbitrary files via vectors involving a modified input…
    cvelistv5