Description
Multiple buffer overflows in sharutils 4.2.1 and earlier may allow attackers to execute arbitrary code via (1) long output from wc to shar, or (2) unknown vectors in unshar.
Metrics
CVSS 2.0 7.5/10
AV:N/AC:L/Au:N/C:P/I:P/A:PAffected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
- http://security.gentoo.org/glsa/glsa-200410-01.xmlPatch, Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2005-377.html
- http://www.securityfocus.com/bid/11298Patch
- https://bugzilla.fedora.us/show_bug.cgi?id=2155Patch
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11093
- http://security.gentoo.org/glsa/glsa-200410-01.xmlPatch, Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2005-377.html
- http://www.securityfocus.com/bid/11298Patch
- https://bugzilla.fedora.us/show_bug.cgi?id=2155Patch
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11093
Timeline
- Published
- Dec 31, 2004
- Last modified
- Jun 16, 2026
- NVD status
- Modified