GCVE - cpe:2.3:a:sentex:jhead:2.8:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:sentex:jhead:2.8:*:*:*:*:*:*:*

part: a version: 2.8 update: *

Vendor	Sentex (`efcfcc37-712e-5ed5-a391-f80f0b7e7e44`)
Product	Jhead (`02cf11f8-892a-59a0-85dd-4eb7dca53826`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/jhead`	purl2cpe	2026-06-01 10:17:58.225826
`pkg:deb/ubuntu/jhead`	purl2cpe	2026-06-01 10:17:58.225828
`pkg:github/matthias-wandel/jhead`	purl2cpe	2026-06-01 10:17:58.225829
`pkg:rpm/fedora/jhead`	purl2cpe	2026-06-01 10:17:58.225831
`pkg:rpm/opensuse/jhead`	purl2cpe	2026-06-01 10:17:58.225832

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2008-4641`	vulnerable	2026-06-08 04:50:47.477788	Details available The DoCommand function in jhead.c in Matthias Wandel jhead 2.84 and earlier allows attackers to execute arbitrary commands via shell metacharacters in unspecified input. Published: 2008-10-21T16:00:00.000Z Updated: 2024-08-07T10:24:20.785Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/31921 https://bugs.launchpad.net/ubuntu/+source/jhead/+bug/271020 http://www.openwall.com/lists/oss-security/2008/10/15/5 http://www.openwall.com/lists/oss-security/2008/11/26/4 http://www.openwall.com/lists/oss-security/2008/10/16/3	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-4640`	vulnerable	2026-06-08 04:50:47.476992	Details available The DoCommand function in jhead.c in Matthias Wandel jhead 2.84 and earlier allows local users to delete arbitrary files via vectors involving a modified input filename in which (1) a final "z" character is replaced by a "t" character or (2) a final "t" character is replaced by a "z" character. Published: 2008-10-21T16:00:00.000Z Updated: 2024-08-07T10:24:20.685Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/32506 https://bugs.launchpad.net/ubuntu/+source/jhead/+bug/271020 http://www.openwall.com/lists/oss-security/2008/11/26/4 http://www.openwall.com/lists/oss-security/2008/10/16/3	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-4639`	vulnerable	2026-06-08 04:50:47.475341	Details available jhead.c in Matthias Wandel jhead 2.84 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file. Published: 2008-10-21T16:00:00.000Z Updated: 2024-08-07T10:24:20.863Z Open on db.gcve.eu Reference links https://bugs.launchpad.net/ubuntu/+source/jhead/+bug/271020 http://www.openwall.com/lists/oss-security/2008/10/15/5 http://www.openwall.com/lists/oss-security/2009/02/06/5 http://www.openwall.com/lists/oss-security/2008/10/16/3 http://www.openwall.com/lists/oss-security/2008/10/15/6	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-4575`	vulnerable	2026-06-08 04:50:39.419281	Details available Buffer overflow in the DoCommand function in jhead before 2.84 might allow context-dependent attackers to cause a denial of service (crash) via (1) a long -cmd argument and (2) unspecified vectors related to "a bunch of potential string overflows." Published: 2008-10-15T19:00:00.000Z Updated: 2024-08-07T10:24:20.565Z Open on db.gcve.eu Reference links https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00511.html http://www.securityfocus.com/bid/31770 http://www.sentex.net/~mwandel/jhead/changes.txt http://secunia.com/advisories/32363 https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00531.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.