FreeBSD : sharutils -- buffer overflows (26c9e8c6-1c99-11d9-814e-0001020eed82)

high Nessus Plugin ID 36869

Synopsis

The remote FreeBSD host is missing a security-related update.

Description

From Gentoo advisory GLSA 200410-01 :

sharutils contains two buffer overflows. Ulf Harnhammar discovered a buffer overflow in shar.c, where the length of data returned by the wc command is not checked. Florian Schilhabel discovered another buffer overflow in unshar.c.

An attacker could exploit these vulnerabilities to execute arbitrary code as the user running one of the sharutils programs.

Solution

Update the affected package.

Plugin Details

Severity: High

ID: 36869

File Name: freebsd_pkg_26c9e8c61c9911d9814e0001020eed82.nasl

Version: 1.18

Type: local

Family: FreeBSD Local Security Checks

Published: 4/23/2009

Updated: 1/6/2021

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.3

CVSS v2

Risk Factor: High

Base Score: 7.5

Temporal Score: 5.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Information

CPE: p-cpe:/a:freebsd:freebsd:sharutils, cpe:/o:freebsd:freebsd

Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info

Exploit Ease: No known exploits are available

Patch Publication Date: 10/13/2004

Vulnerability Publication Date: 8/15/2004

Reference Information

CVE: CVE-2004-1773

BID: 11298

Detections

Analytics