CVE-2008-4641: Input Validation
Published Oct 21, 2008
·Updated
The DoCommand function in jhead.c in Matthias Wandel jhead 2.84 and earlier allows attackers to execute arbitrary commands via shell metacharacters in unspecified input.
Affected Software
20 affected components
Sentex Jhead=2.6
Sentex Jhead=1.5
Sentex Jhead=2.3
Sentex Jhead=2.5
Sentex Jhead=1.3
Sentex Jhead=2.4-2
Sentex Jhead=1.2
Sentex Jhead=1.8
Sentex Jhead=2.0
Sentex Jhead=2.7
Sentex Jhead=2.4-1
Sentex Jhead=1.6
Sentex Jhead=2.4
Sentex Jhead=1.9
Sentex Jhead=1.7
Sentex Jhead=1.4
Sentex Jhead=2.1
Sentex Jhead<=2.82
Sentex Jhead=2.8
Sentex Jhead=2.2
Event History
Oct 21, 2008
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-4641?
CVE-2008-4641 is considered a high severity vulnerability due to its potential for remote command execution.
2
How do I fix CVE-2008-4641?
To fix CVE-2008-4641, upgrade to a version of jhead later than 2.84, as earlier versions are affected.
3
What type of vulnerability is CVE-2008-4641?
CVE-2008-4641 is a command injection vulnerability that allows attackers to execute arbitrary commands.
4
Which versions of jhead are affected by CVE-2008-4641?
CVE-2008-4641 affects jhead versions 2.84 and earlier, including several specific versions up to 2.8.
5
Can CVE-2008-4641 be exploited remotely?
Yes, CVE-2008-4641 can be exploited remotely if the vulnerable software is exposed to untrusted input.