Description
The DoCommand function in jhead.c in Matthias Wandel jhead 2.84 and earlier allows local users to delete arbitrary files via vectors involving a modified input filename in which (1) a final "z" character is replaced by a "t" character or (2) a final "t" character is replaced by a "z" character.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | jhead | 2.85-1 | — |
| Debian 13 | jhead | 2.85-1 | — |
| Debian 12 | jhead | 2.85-1 | — |
References
- 32506 vdb-entry
- https://bugs.launchpad.net/ubuntu/+source/jhead/+bug/271020
- [oss-security] 20081127 Re: CVE request: jhead mailing-list
- [oss-security] 20081016 Re: CVE request: jhead mailing-list