|
CVE Reference: CVE-2008-4640
|
|
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.
|
|
Original Page at CVE MITRE:
CVE-2008-4640
|
|
Description:
The DoCommand function in jhead.c in Matthias Wandel jhead 2.84 and earlier allows local users to delete arbitrary files via vectors involving a modified input filename in which (1) a final "z" character is replaced by a "t" character or (2) a final "t" character is replaced by a "z" character.
|
|
CVE Status:
Candidate
|
|
References:
MLIST http://www.openwall.com/lists/oss-security/2008/11/26/4 http://www.openwall.com/lists/oss-security/2008/10/16/3
CONFIRM
BID 32506
|
|
|
Return to the previous page.
|