| Package | Affected versions | Patched versions |
|---|---|---|
| jhead | = 1.2= 1.3= 1.4= 1.5= 1.6= 1.7= 1.8= 1.9= 2.0= 2.1= 2.2= 2.3= 2.4= 2.4-1= 2.4-2= 2.5= 2.6= 2.7= 2.8≤ 2.82 |
The DoCommand function in jhead.c in Matthias Wandel jhead 2.84 and earlier allows local users to delete arbitrary files via vectors involving a modified input filename in which (1) a final "z" character is replaced by a "t" character or (2) a final "t" character is replaced by a "z" character.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free