GNU Sharutils 4.2
Approved changes feed: RSS · Atom
cpe:2.3:a:gnu:sharutils:4.2:*:*:*:*:*:*:*
part: a version: 4.2 update: *
| Vendor | Gnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9) |
|---|---|
| Product | Sharutils (def16904-6b5e-504d-9aa7-c1b4568e8702) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/sharutils |
purl2cpe | 2026-06-01 10:11:53.685228 |
pkg:deb/ubuntu/sharutils |
purl2cpe | 2026-06-01 10:11:53.685229 |
pkg:github/gitgnu/gnu_sharutils |
purl2cpe | 2026-06-01 10:11:53.685231 |
pkg:github/neverware-mirrors/sharutils |
purl2cpe | 2026-06-01 10:11:53.685232 |
pkg:gitlab/redhat/sharutils |
purl2cpe | 2026-06-01 10:11:53.685233 |
pkg:gnu/sharutils |
purl2cpe | 2026-06-01 10:11:53.685235 |
pkg:rpm/centos/sharutils |
purl2cpe | 2026-06-01 10:11:53.685236 |
pkg:rpm/fedora/sharutils |
purl2cpe | 2026-06-01 10:11:53.685237 |
pkg:rpm/opensuse/sharutils |
purl2cpe | 2026-06-01 10:11:53.685239 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2004-1773 |
vulnerable | 2026-06-08 04:48:07.571821 |
Details available
Multiple buffer overflows in sharutils 4.2.1 and earlier may allow attackers to execute arbitrary code via (1) long output from wc to shar, or (2) unknown vectors in unshar.
Published: 2005-03-28T05:00:00.000Z
Updated: 2024-08-08T01:00:37.314Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-1772 |
vulnerable | 2026-06-08 04:48:07.570874 |
Details available
Stack-based buffer overflow in shar in GNU sharutils 4.2.1 allows local users to execute arbitrary code via a long -o command line argument.
Published: 2005-03-28T05:00:00.000Z
Updated: 2024-08-08T01:00:37.256Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-0178 |
vulnerable | 2026-06-08 04:46:20.865266 |
Details available
uudecode, as available in the sharutils package before 4.2.1, does not check whether the filename of the uudecoded file is a pipe or symbolic link, which could allow attackers to overwrite files or execute commands.
Published: 2003-04-02T05:00:00.000Z
Updated: 2024-08-08T02:42:27.761Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.