Publication date 21 October 2008
Last updated 24 July 2024
Description
The DoCommand function in jhead.c in Matthias Wandel jhead 2.84 and earlier allows local users to delete arbitrary files via vectors involving a modified input filename in which (1) a final "z" character is replaced by a "t" character or (2) a final "t" character is replaced by a "z" character.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| jhead | 11.10 oneiric |
Not affected |
| 11.04 natty |
Not affected |
|
| 10.10 maverick |
Not affected |
|
| 10.04 LTS lucid |
Not affected |
|
| 9.10 karmic |
Not affected |
|
| 9.04 jaunty |
Not affected |
|
| 8.10 intrepid | Ignored end of life, was needed | |
| 8.04 LTS hardy | Ignored end of life | |
| 7.10 gutsy | Ignored end of life, was needed | |
| 6.06 LTS dapper | Ignored end of life |