• info
• discussion
• exploit
• solution
• references

GNU Sharutils shar Command Line Parsing Buffer Overflow Vulnerability

Solution:
Please see the referenced advisories for more information.


GNU sharutils 4.2.1

• Fedora sharutils-4.2.1-18.1.FC2.i386.rpm
  RedHat Fedora Core 2
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/


• Fedora sharutils-4.2.1-18.1.FC2.x86_64.rpm
  RedHat Fedora Core 2
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/


• Fedora sharutils-4.2.1-22.1.FC3.i386.rpm
  RedHat Fedora Core 3
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/


• Fedora sharutils-4.2.1-22.1.FC3.x86_64.rpm
  RedHat Fedora Core 3
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/


• Fedora sharutils-debuginfo-4.2.1-18.1.FC2.i386.rpm
  RedHat Fedora Core 2
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/


• Fedora sharutils-debuginfo-4.2.1-18.1.FC2.x86_64.rpm
  RedHat Fedora Core 2
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/


• Fedora sharutils-debuginfo-4.2.1-22.1.FC3.i386.rpm
  RedHat Fedora Core 3
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/


• Fedora sharutils-debuginfo-4.2.1-22.1.FC3.x86_64.rpm
  RedHat Fedora Core 3
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/


• Mandrake sharutils-4.2.1-14.1.100mdk.amd64.rpm
  Mandrake Linux 10.0/AMD64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake sharutils-4.2.1-14.1.100mdk.i586.rpm
  Mandrake Linux 10.0
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake sharutils-4.2.1-14.1.C21mdk.i586.rpm
  Mandrake Corporate Server 2.1
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake sharutils-4.2.1-14.1.C21mdk.x86_64.rpm
  Mandrake Corporate Server 2.1/x86_64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake sharutils-4.2.1-14.1.C30mdk.i586.rpm
  Mandrake Corporate Server 3.0
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake sharutils-4.2.1-14.1.C30mdk.x86_64.rpm
  Mandrake Corporate Server 3.0/x86_64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake sharutils-4.2.1-17.1.101mdk.i586.rpm
  Mandrake Linux 10.1
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake sharutils-4.2.1-17.1.101mdk.x86_64.rpm
  Mandrake Linux 10.1/x86_64
  http://www.mandrakesecure.net/en/ftp.php


• OpenPKG sharutils-4.2.1-2.0.1.src.rpm
  ftp://ftp.openpkg.org/release/2.0/UPD/sharutils-4.2.1-2.0.1.src.rpm


• Ubuntu sharutils-doc_4.2.1-10ubuntu0.1_all.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/s/sharutils/sharutils-doc_ 4.2.1-10ubuntu0.1_all.deb


• Ubuntu sharutils_4.2.1-10ubuntu0.1_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/s/sharutils/sharutils_4.2. 1-10ubuntu0.1_amd64.deb


• Ubuntu sharutils_4.2.1-10ubuntu0.1_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/s/sharutils/sharutils_4.2. 1-10ubuntu0.1_i386.deb


• Ubuntu sharutils_4.2.1-10ubuntu0.1_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/s/sharutils/sharutils_4.2. 1-10ubuntu0.1_powerpc.deb