Skip to content
OpenAdvisories
Unscored RHSA-2005:377 3 CVEs

Red Hat Security Advisory: sharutils security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 16

ReleasePackageFixed in
Red Hat · RHEL 3 enterprise_linux:3::as sharutils 0:4.2.1-16.2
Red Hat · RHEL 3 enterprise_linux:3::as sharutils-debuginfo 0:4.2.1-16.2
Red Hat · RHEL 3 enterprise_linux:3::desktop sharutils 0:4.2.1-16.2
Red Hat · RHEL 3 enterprise_linux:3::desktop sharutils-debuginfo 0:4.2.1-16.2
Red Hat · RHEL 3 enterprise_linux:3::es sharutils 0:4.2.1-16.2
Red Hat · RHEL 3 enterprise_linux:3::es sharutils-debuginfo 0:4.2.1-16.2
Red Hat · RHEL 3 enterprise_linux:3::ws sharutils 0:4.2.1-16.2
Red Hat · RHEL 3 enterprise_linux:3::ws sharutils-debuginfo 0:4.2.1-16.2
Red Hat · RHEL 4 enterprise_linux:4::as sharutils 0:4.2.1-22.2
Red Hat · RHEL 4 enterprise_linux:4::as sharutils-debuginfo 0:4.2.1-22.2
Red Hat · RHEL 4 enterprise_linux:4::desktop sharutils 0:4.2.1-22.2
Red Hat · RHEL 4 enterprise_linux:4::desktop sharutils-debuginfo 0:4.2.1-22.2
Red Hat · RHEL 4 enterprise_linux:4::es sharutils 0:4.2.1-22.2
Red Hat · RHEL 4 enterprise_linux:4::es sharutils-debuginfo 0:4.2.1-22.2
Red Hat · RHEL 4 enterprise_linux:4::ws sharutils 0:4.2.1-22.2
Red Hat · RHEL 4 enterprise_linux:4::ws sharutils-debuginfo 0:4.2.1-22.2

Vulnerabilities 3

  • Unscored —
    CVE-2004-1772

    Stack-based buffer overflow in shar in GNU sharutils 4.2.1 allows local users to execute arbitrary code via a long -o c…

    sharutils Debian
  • Unscored —
    CVE-2004-1773

    Multiple buffer overflows in sharutils 4.2.1 and earlier may allow attackers to execute arbitrary code via (1) long out…

    sharutils Debian
  • Unscored —
    CVE-2005-0990

    unshar (unshar.c) in sharutils 4.2.1 allows local users to overwrite arbitrary files via a symlink attack on the unsh.X…

    sharutils Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#low
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=152571
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=152573
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=154049
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_377.json
  • report
    https://access.redhat.com/security/cve/CVE-2004-1772
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617417
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2004-1772
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2004-1772
  • report
    https://access.redhat.com/security/cve/CVE-2004-1773
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617418
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2004-1773
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2004-1773
  • report
    https://access.redhat.com/security/cve/CVE-2005-0990
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617597
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2005-0990
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2005-0990