CVE-2004-1773 Multiple buffer overflows in sharutils 4.2.1 and earlier may allow attackers to execute arbitrary code via (1) long output from wc to shar, or (2) unknown vectors in unshar.
HighCVSS 7.5
EPSS 3.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple buffer overflows in sharutils 4.2.1 and earlier may allow attackers to execute arbitrary code via (1) long output from wc to shar, or (2) unknown vectors in unshar.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| GNU sharutils | = 4.2 | No fix listed |
| GNU sharutils | = 4.2.1 | No fix listed |
| debian/sharutils(Debian:12) | < 1:4.2.1-12 | 1:4.2.1-12 |
| debian/sharutils(Debian:13) | < 1:4.2.1-12 | 1:4.2.1-12 |
| debian/sharutils(Debian:14) | < 1:4.2.1-12 | 1:4.2.1-12 |
References
- GLSA-200410-01 patch vendor-advisory
- RHSA-2005:377 vendor-advisory
- 11298 patch vdb-entry
- FLSA:2155 patch vendor-advisory
- oval:org.mitre.oval:def:11093 signature vdb-entry
- Debian Security Tracker CVE-2004-1773 vendor-advisory