CVEvulnerability
CVE-2004-1773
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2004-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Multiple buffer overflows in sharutils 4.2.1 and earlier may allow attackers to execute arbitrary code via (1) long output from wc to shar, or (2) unknown vectors in unshar.
Affected configurations
• gnu sharutils 4.2
• gnu sharutils 4.2.1
References
- http://security.gentoo.org/glsa/glsa-200410-01.xml Patch, Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2005-377.html www.redhat.com
- http://www.securityfocus.com/bid/11298 Patch
- https://bugzilla.fedora.us/show_bug.cgi?id=2155 Patch
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11093 oval.cisecurity.org
- http://security.gentoo.org/glsa/glsa-200410-01.xml Patch, Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2005-377.html www.redhat.com
- http://www.securityfocus.com/bid/11298 Patch
- https://bugzilla.fedora.us/show_bug.cgi?id=2155 Patch
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11093 oval.cisecurity.org