CVE-2004-1773

EPSS 1.85%
Published 31.12.2004 05:00:00
Last modified 03.04.2025 01:03:51
Source cve@mitre.org
Teams watchlist Login
Open Login

Multiple buffer overflows in sharutils 4.2.1 and earlier may allow attackers to execute arbitrary code via (1) long output from wc to shar, or (2) unknown vectors in unshar.

Affected products Warnungen 0 Metrics 2 CWE 0 References 8

Data is provided by the National Vulnerability Database (NVD)

Gnu ≫ Sharutils Version4.2

Gnu ≫ Sharutils Version4.2.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	1.85%	0.813

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

http://www.redhat.com/support/errata/RHSA-2005-377.html

https://bugzilla.fedora.us/show_bug.cgi?id=2155

Patch

http://security.gentoo.org/glsa/glsa-200410-01.xml

Patch

Vendor Advisory

http://www.securityfocus.com/bid/11298

Patch

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11093

https://nvd.nist.gov/vuln/detail/CVE-2004-1773

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2004-1773

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2004-1773

EUVD