CVE-2002-0178: High severity gnu sharutils vulnerability
Published May 29, 2002
·Updated
uudecode, as available in the sharutils package before 4.2.1, does not check whether the filename of the uudecoded file is a pipe or symbolic link, which could allow attackers to overwrite files or execute commands.
Affected Software
1 affected component
GNU sharutils=4.2
Remediation
Patch Available
Event History
May 29, 2002
CVE Published
04:00 AM
Apr 2, 2003
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-0178?
CVE-2002-0178 has a medium severity level due to the potential for file overwriting and command execution.
2
How do I fix CVE-2002-0178?
To mitigate CVE-2002-0178, upgrade the sharutils package to version 4.2.1 or later.
3
What vulnerabilities does CVE-2002-0178 expose?
CVE-2002-0178 exposes the risk of attackers overwriting files and executing arbitrary commands via symbolic links or pipes.
4
Which software is affected by CVE-2002-0178?
CVE-2002-0178 affects the GNU sharutils version 4.2 and earlier.
5
Is CVE-2002-0178 still relevant today?
CVE-2002-0178 is less relevant today but highlights important file handling vulnerabilities that can still occur in various contexts.