Sharutils

sharutils

Vendor: Gnu • 5 CVEs

CVEs (5)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2018-1000097 3Canonical DebianGnu 3Debian Linux SharutilsUbuntu Linux Nov 21, 2024 Mar 13, 2018 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Sharutils sharutils (unshar command) version 4.15.2 contains a Buffer Overflow vulnerability in Affected component on the file unshar.c at line 75, function looks_like_c_code. Failure to perform checking of the buffer co...Show more Sharutils sharutils (unshar command) version 4.15.2 contains a Buffer Overflow vulnerability in Affected component on the file unshar.c at line 75, function looks_like_c_code. Failure to perform checking of the buffer containing input line. that can result in Could lead to code execution. This attack appear to be exploitable via Victim have to run unshar command on a specially crafted file..Show less
CVE-2005-0990 1Gnu 1Sharutils Apr 16, 2026 May 2, 2005 N/A· v4 N/A· v3 2.1 LOW· v2 unshar (unshar.c) in sharutils 4.2.1 allows local users to overwrite arbitrary files via a symlink attack on the unsh.X temporary file.
CVE-2004-1773 1Gnu 1Sharutils Apr 16, 2026 Dec 31, 2004 N/A· v4 N/A· v3 7.5 HIGH· v2 Multiple buffer overflows in sharutils 4.2.1 and earlier may allow attackers to execute arbitrary code via (1) long output from wc to shar, or (2) unknown vectors in unshar.
CVE-2004-1772 1Gnu 1Sharutils Apr 16, 2026 Dec 31, 2004 N/A· v4 N/A· v3 4.6 MEDIUM· v2 Stack-based buffer overflow in shar in GNU sharutils 4.2.1 allows local users to execute arbitrary code via a long -o command line argument.
CVE-2002-0178 1Gnu 1Sharutils Apr 16, 2026 May 29, 2002 N/A· v4 N/A· v3 7.2 HIGH· v2 uudecode, as available in the sharutils package before 4.2.1, does not check whether the filename of the uudecoded file is a pipe or symbolic link, which could allow attackers to overwrite files or execute commands.