Approved changes feed: RSS · Atom

cpe:2.3:a:gnu:sharutils:4.2.1:*:*:*:*:*:*:*

part: a version: 4.2.1 update: *

VendorGnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9)
ProductSharutils (def16904-6b5e-504d-9aa7-c1b4568e8702)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/sharutils purl2cpe 2026-06-01 10:11:53.685240
pkg:deb/ubuntu/sharutils purl2cpe 2026-06-01 10:11:53.685241
pkg:github/gitgnu/gnu_sharutils purl2cpe 2026-06-01 10:11:53.685243
pkg:github/neverware-mirrors/sharutils purl2cpe 2026-06-01 10:11:53.685244
pkg:gitlab/redhat/sharutils purl2cpe 2026-06-01 10:11:53.685245
pkg:gnu/sharutils purl2cpe 2026-06-01 10:11:53.685247
pkg:rpm/centos/sharutils purl2cpe 2026-06-01 10:11:53.685248
pkg:rpm/fedora/sharutils purl2cpe 2026-06-01 10:11:53.685249
pkg:rpm/opensuse/sharutils purl2cpe 2026-06-01 10:11:53.685251

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2005-0990 vulnerable 2026-06-08 04:48:14.164355 Details available
unshar (unshar.c) in sharutils 4.2.1 allows local users to overwrite arbitrary files via a symlink attack on the unsh.X temporary file.
Published: 2005-04-06T04:00:00.000Z
Updated: 2024-08-07T21:35:59.546Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1773 vulnerable 2026-06-08 04:48:07.571844 Details available
Multiple buffer overflows in sharutils 4.2.1 and earlier may allow attackers to execute arbitrary code via (1) long output from wc to shar, or (2) unknown vectors in unshar.
Published: 2005-03-28T05:00:00.000Z
Updated: 2024-08-08T01:00:37.314Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1772 vulnerable 2026-06-08 04:48:07.571423 Details available
Stack-based buffer overflow in shar in GNU sharutils 4.2.1 allows local users to execute arbitrary code via a long -o command line argument.
Published: 2005-03-28T05:00:00.000Z
Updated: 2024-08-08T01:00:37.256Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.