CVE-2005-0990 unshar (unshar.c) in sharutils 4.2.1 allows local users to overwrite arbitrary files via a symlink attack on the unsh.X temporary file.
LowCVSS 2.1
EPSS 0.36%
- Published
- Updated
- Exploit status
- No public exploit known
Description
unshar (unshar.c) in sharutils 4.2.1 allows local users to overwrite arbitrary files via a symlink attack on the unsh.X temporary file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| GNU sharutils | = 4.2.1 | No fix listed |
| debian/sharutils(Debian:12) | < 1:4.2.1-13 | 1:4.2.1-13 |
| debian/sharutils(Debian:13) | < 1:4.2.1-13 | 1:4.2.1-13 |
| debian/sharutils(Debian:14) | < 1:4.2.1-13 | 1:4.2.1-13 |
References
- bugs.debian.org vendor-advisory
- RHSA-2005:377 patch vendor-advisory
- 12981 vdb-entry
- bugzilla.ubuntu.com vendor-advisory
- sharutils-temp-file-symlink(19957) vdb-entry
- oval:org.mitre.oval:def:9613 signature vdb-entry
- USN-104-1 vendor-advisory
- Debian Security Tracker CVE-2005-0990 vendor-advisory