CVE-2004-1772 Stack-based buffer overflow in shar in GNU sharutils 4.2.1 allows local users to execute arbitrary code via a long -o command line argument.
MediumCVSS 4.6
EPSS 0.65%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in shar in GNU sharutils 4.2.1 allows local users to execute arbitrary code via a long -o command line argument.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| GNU sharutils | = 4.2 | No fix listed |
| GNU sharutils | = 4.2.1 | No fix listed |
| debian/sharutils(Debian:12) | < 1:4.2.1-11 | 1:4.2.1-11 |
| debian/sharutils(Debian:13) | < 1:4.2.1-11 | 1:4.2.1-11 |
| debian/sharutils(Debian:14) | < 1:4.2.1-11 | 1:4.2.1-11 |
References
- OpenPKG-SA-2004.011 vendor-advisory
- RHSA-2005:377 vendor-advisory
- 20040406 GNU Sharutils buffer overflow vulnerability. exploit mailing-list patch
- 10066 patch vdb-entry
- FLSA:2155 patch vendor-advisory
- sharutils-shar-bo(15759) vdb-entry
- oval:org.mitre.oval:def:11722 signature vdb-entry
- Debian Security Tracker CVE-2004-1772 vendor-advisory