CVE-2018-1000097

概要

参考情報

• seclists.org/bugtraq/2018/Feb/54 · Mailing List
• usn.ubuntu.com/3605-1 · Third Party Advisory
• debian.org/security/2018/dsa-4167 · Third Party Advisory

sharutils のその他の脆弱性

• CVE-2005-0990低 2.1unshar (unshar.c) in sharutils 4.2.1 allows local users to overwrite arbitrary files via a symlink attack on the unsh.X temporary file.
• CVE-2004-1773高 7.5Multiple buffer overflows in sharutils 4.2.1 and earlier may allow attackers to execute arbitrary code via (1) long output from wc to shar, …
• CVE-2004-1772中 4.6Stack-based buffer overflow in shar in GNU sharutils 4.2.1 allows local users to execute arbitrary code via a long -o command line argument.
• CVE-2002-0178高 7.2uudecode, as available in the sharutils package before 4.2.1, does not check whether the filename of the uudecoded file is a pipe or symboli…