Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Sentex Subscribe
Filtered by product Jhead
Total 4 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2008-4639 1 Sentex 1 Jhead 2010-12-27 4.6 MEDIUM N/A
jhead.c in Matthias Wandel jhead 2.84 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file.
CVE-2008-4575 1 Sentex 1 Jhead 2009-02-09 5.0 MEDIUM N/A
Buffer overflow in the DoCommand function in jhead before 2.84 might allow context-dependent attackers to cause a denial of service (crash) via (1) a long -cmd argument and (2) unspecified vectors related to "a bunch of potential string overflows."
CVE-2008-4640 1 Sentex 1 Jhead 2008-12-02 3.6 LOW N/A
The DoCommand function in jhead.c in Matthias Wandel jhead 2.84 and earlier allows local users to delete arbitrary files via vectors involving a modified input filename in which (1) a final "z" character is replaced by a "t" character or (2) a final "t" character is replaced by a "z" character.
CVE-2008-4641 1 Sentex 1 Jhead 2008-12-02 10.0 HIGH N/A
The DoCommand function in jhead.c in Matthias Wandel jhead 2.84 and earlier allows attackers to execute arbitrary commands via shell metacharacters in unspecified input.