Description
uudecode, as available in the sharutils package before 4.2.1, does not check whether the filename of the uudecoded file is a pipe or symbolic link, which could allow attackers to overwrite files or execute commands.
References
- 4742 vdb-entry
- 20021030 GLSA: sharutils mailing-list
- MDKSA-2002:052 vendor-advisory
- RHSA-2003:180 vendor-advisory
- VU#336083 third-party-advisory
- 8274 vdb-entry
- http://www.aerasec.de/security/index.html?id=ae-200204-033&lang=en
- RHSA-2002:065 vendor-advisory
- sharutils-uudecode-symlink(9075) vdb-entry
- HPSBTL0205-040 vendor-advisory