CVE-2008-4641 in jhead

Riassunto

di MITRE

The DoCommand function in jhead.c in Matthias Wandel jhead 2.84 and earlier allows attackers to execute arbitrary commands via shell metacharacters in unspecified input.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Prenotare: 21/10/2008
• Divulgazione: 21/10/2008
• Moderazione: accettato
• Voce: VDB-44613
• CPE: pronto
• CWE: CWE-20 (confermato)
• CVSS: 9.8 (VulDB)
• EPSS: 0.02197
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2008-4641
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2008-4641
• CVE Details: https://www.cvedetails.com/cve/CVE-2008-4641/