Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5

Export CSV
CVE-2002-0178

security flaw

uudecode, as available in the sharutils package before 4.2.1, does not check whether the filename of the uudecoded file is a pipe or symbolic link, which could allow attackers to overwrite files or execute commands.

CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Gnu Redhat
Products
Sharutils Enterprise Linux Linux
CVE-2004-1772

security flaw

Stack-based buffer overflow in shar in GNU sharutils 4.2.1 allows local users to execute arbitrary code via a long -o command line argument.

CVSS 2.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Gnu Redhat
Products
Sharutils Enterprise Linux
CVE-2004-1773

security flaw

Multiple buffer overflows in sharutils 4.2.1 and earlier may allow attackers to execute arbitrary code via (1) long output from wc to shar, or (2) unknown vectors in unshar.

CVSS 2.0 · 7.5 High EPSS 3.0% KEV · Not listed
Vendors
Gnu Redhat
Products
Sharutils Enterprise Linux
CVE-2005-0990

security flaw

unshar (unshar.c) in sharutils 4.2.1 allows local users to overwrite arbitrary files via a symlink attack on the unsh.X temporary file.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Gnu Redhat
Products
Sharutils Enterprise Linux
CVE-2018-1000097

sharutils: heap-buffer-overflow in find_archive in unshar.c

Sharutils sharutils (unshar command) version 4.15.2 contains a Buffer Overflow vulnerability in Affected component on the file unshar.c at line 75, function looks_like_c_code. Failure to perform checking of the buffer containing input line. that can result in Could lead to code execution. This attack appear to be exploitable via Victim have to run unshar command on a specially crafted file..

CVSS 3.0 · 7.8 High EPSS 2.0% KEV · Not listed
Vendors
Canonical Debian Gnu
Products
Ubuntu Linux Debian Linux Sharutils