CVE-2008-4641

Sažetak

The DoCommand function in jhead.c in Matthias Wandel jhead 2.84 and earlier allows attackers to execute arbitrary commands via shell metacharacters in unspecified input.

Reference

http://www.openwall.com/lists/oss-security/2008/10/15/5
http://www.openwall.com/lists/oss-security/2008/10/15/6
http://www.openwall.com/lists/oss-security/2008/10/16/3
http://www.openwall.com/lists/oss-security/2008/11/26/4
http://www.securityfocus.com/bid/31921
https://bugs.launchpad.net/ubuntu/+source/jhead/+bug/271020

CVSS

Base:	10.0
Impact:	10.0
Exploitability:	10.0

Pristup

Vektor	Složenost	Autentikacija
NETWORK	LOW	NONE

Impact

Povjerljivost	Cjelovitost	Dostupnost
COMPLETE	COMPLETE	COMPLETE

CVSS vektor

AV:N/AC:L/Au:N/C:C/I:C/A:C

Zadnje važnije ažuriranje

03-12-2008 - 06:45

Objavljeno

21-10-2008 - 18:00