Sharutils (Gnu) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 4 known versions, newest CVE from 2018-03-13. Vendor: Gnu.

CVEs of Sharutils

• CVE-2018-1000097 - CVSS 7.8 (high), 2018-03-13: Sharutils sharutils (unshar command) version 4.15.2 contains a Buffer Overflow vulnerability in Affected component on the file unshar.c at line 75, function…
• CVE-2005-0990 - CVSS 2.1 (low), 2005-05-02: unshar (unshar.c) in sharutils 4.2.1 allows local users to overwrite arbitrary files via a symlink attack on the unsh.X temporary file.
• CVE-2004-1772 - CVSS 4.6 (medium), 2004-12-31: Stack-based buffer overflow in shar in GNU sharutils 4.2.1 allows local users to execute arbitrary code via a long -o command line argument.
• CVE-2004-1773 - CVSS 7.5 (high), 2004-12-31: Multiple buffer overflows in sharutils 4.2.1 and earlier may allow attackers to execute arbitrary code via (1) long output from wc to shar, or (2) unknown…
• CVE-2002-0178 - CVSS 7.2 (high), 2002-05-29: uudecode, as available in the sharutils package before 4.2.1, does not check whether the filename of the uudecoded file is a pipe or symbolic link, which…