115 matches found
CVE-2005-0990
unshar unshar.c in sharutils 4.2.1 allows local users to overwrite arbitrary files via a symlink attack on the unsh.X temporary file...
CVE-2005-0990
CVE-2005-0990 affects sharutils 4.2.1, specifically unshar.c, where a local user can perform a symlink attack on the unsh.X temporary file to overwrite arbitrary files. This is described across multiple sources (NVD entry for CVE-2005-0990, Debian/OSV references, and Red Hat/CentOS advisories) an...
sharutils: Insecure temporary file creation
Background sharutils is a collection of tools to deal with shar archives. Description Joey Hess has discovered that the program unshar, which is a part of sharutils, creates temporary files in a world-writable directory with predictable names. Impact A local attacker could create symbolic links i...
CVE-2005-0990: Undefined Security Weakness
unshar unshar.c in sharutils 4.2.1 allows local users to overwrite arbitrary files via a symlink attack on the unsh.X temporary file...
sharutils -- unshar insecure temporary file creation
An Ubuntu Advisory reports: Joey Hess discovered that "unshar" created temporary files in an insecure manner. This could allow a symbolic link attack to create or overwrite arbitrary files with the privileges of the user invoking the program...
CVE-2004-1773
CVE-2004-1773 affects sharutils up to version 4.2.1 and earlier. The issue comprises two buffer overflows: (1) in shar.c related to the length of data returned by the wc command, and (2) in unshar.c. An attacker could exploit these to execute arbitrary code with the privileges of the user running...
CVE-2004-1773
Multiple buffer overflows in sharutils 4.2.1 and earlier may allow attackers to execute arbitrary code via 1 long output from wc to shar, or 2 unknown vectors in unshar...
CVE-2004-1772
Stack-based buffer overflow in shar in GNU sharutils 4.2.1 allows local users to execute arbitrary code via a long -o command line argument...
CVE-2004-1772
Stack-based buffer overflow in shar in GNU sharutils 4.2.1 allows local users to execute arbitrary code via a long -o command line argument...
CVE-2004-1773
Multiple buffer overflows in sharutils 4.2.1 and earlier may allow attackers to execute arbitrary code via 1 long output from wc to shar, or 2 unknown vectors in unshar...
CVE-2004-1772
CVE-2004-1772 describes a stack-based overflow in the -o option handling of the GNU sharutils package (version 4.2.1) that can allow a local user to execute arbitrary code. The vulnerability affects the sharutils tooling and has been acknowledged in several advisories (for example RHSA-2005:377)....
CVE-2004-1772: Undefined Security Weakness
Stack-based buffer overflow in shar in GNU sharutils 4.2.1 allows local users to execute arbitrary code via a long -o command line argument...
CVE-2004-1773: Undefined Security Weakness
Multiple buffer overflows in sharutils 4.2.1 and earlier may allow attackers to execute arbitrary code via 1 long output from wc to shar, or 2 unknown vectors in unshar...
CVE-2004-1772
Stack-based buffer overflow in shar in GNU sharutils 4.2.1 allows local users to execute arbitrary code via a long -o command line argument...
CVE-2004-1773
Multiple buffer overflows in sharutils 4.2.1 and earlier may allow attackers to execute arbitrary code via 1 long output from wc to shar, or 2 unknown vectors in unshar...
DEBIAN-CVE-2004-1773
Multiple buffer overflows in sharutils 4.2.1 and earlier may allow attackers to execute arbitrary code via 1 long output from wc to shar, or 2 unknown vectors in unshar...
CVE-2004-1772
Stack-based buffer overflow in shar in GNU sharutils 4.2.1 allows local users to execute arbitrary code via a long -o command line argument...
CVE-2004-1773
Multiple buffer overflows in sharutils 4.2.1 and earlier may allow attackers to execute arbitrary code via 1 long output from wc to shar, or 2 unknown vectors in unshar...