CVE-2008-4641 in jhead

الملخص

بحسب MITRE

The DoCommand function in jhead.c in Matthias Wandel jhead 2.84 and earlier allows attackers to execute arbitrary commands via shell metacharacters in unspecified input.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• حجز: 21/10/2008
• إفشاء: 21/10/2008
• الاعتدال: تمت الموافقة
• إدخال: VDB-44613
• CPE: جاهز
• CWE: CWE-20 (مؤكد)
• CVSS: 9.8 (VulDB)
• EPSS: 0.02197
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2008-4641
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2008-4641
• CVE Details: https://www.cvedetails.com/cve/CVE-2008-4641/