First published: Fri Dec 31 2004(Updated: )
Stack-based buffer overflow in shar in GNU sharutils 4.2.1 allows local users to execute arbitrary code via a long -o command line argument.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
GNU sharutils | =4.2 | |
GNU sharutils | =4.2.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2004-1772 is classified as a high severity vulnerability due to its potential to allow local users to execute arbitrary code.
To fix CVE-2004-1772, you should update GNU sharutils to the latest version that addresses this vulnerability.
CVE-2004-1772 affects local users of GNU sharutils version 4.2 and 4.2.1.
The exploit vector for CVE-2004-1772 is a stack-based buffer overflow triggered by a long -o command line argument.
CVE-2004-1772 cannot be exploited remotely as it requires local user access to execute the vulnerable command.