• info
• discussion
• exploit
• solution
• references

GNU Sharutils Unshar Local Insecure Temporary File Creation Vulnerability

Solution:
Please see referenced advisories for more information.


GNU sharutils 4.2.1

• Mandrake sharutils-4.2.1-14.1.100mdk.amd64.rpm
  Mandrake Linux 10.0/AMD64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake sharutils-4.2.1-14.1.100mdk.i586.rpm
  Mandrake Linux 10.0
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake sharutils-4.2.1-14.1.C21mdk.i586.rpm
  Mandrake Corporate Server 2.1
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake sharutils-4.2.1-14.1.C21mdk.x86_64.rpm
  Mandrake Corporate Server 2.1/x86_64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake sharutils-4.2.1-14.1.C30mdk.i586.rpm
  Mandrake Corporate Server 3.0
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake sharutils-4.2.1-14.1.C30mdk.x86_64.rpm
  Mandrake Corporate Server 3.0/x86_64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake sharutils-4.2.1-17.1.101mdk.i586.rpm
  Mandrake Linux 10.1
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake sharutils-4.2.1-17.1.101mdk.x86_64.rpm
  Mandrake Linux 10.1/x86_64
  http://www.mandrakesecure.net/en/ftp.php


• RedHat sharutils-4.2.1-12.8.legacy.i386.rpm
  RedHat Linux 7.3
  http://download.fedoralegacy.org/redhat/7.3/updates/i386/sharutils-4.2 .1-12.8.legacy.i386.rpm


• RedHat sharutils-4.2.1-16.9.2.legacy.i386.rpm
  RedHat Linux 9.0
  http://download.fedoralegacy.org/redhat/9/updates/i386/sharutils-4.2.1 -16.9.2.legacy.i386.rpm


• RedHat sharutils-4.2.1-17.3.legacy.i386.rpm
  RedHat Fedora Core 1
  http://download.fedoralegacy.org/fedora/1/updates/i386/sharutils-4.2.1 -17.3.legacy.i386.rpm


• RedHat sharutils-4.2.1-18.3.FC2.legacy.i386.rpm
  RedHat Fedora Core 2
  http://download.fedoralegacy.org/fedora/2/updates/i386/sharutils-4.2.1 -18.3.FC2.legacy.i386.rpm


• RedHat Fedora sharutils-4.2.1-22.2.FC3.i386.rpm
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/i386 /sharutils-4.2.1-22.2.FC3.i386.rpm


• RedHat Fedora sharutils-4.2.1-22.2.FC3.x86_64.rpm
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/x86_ 64/sharutils-4.2.1-22.2.FC3.x86_64.rpm


• RedHat Fedora sharutils-debuginfo-4.2.1-22.2.FC3.i386.rpm
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/i386 /debug/sharutils-debuginfo-4.2.1-22.2.FC3.i386.rpm


• RedHat Fedora sharutils-debuginfo-4.2.1-22.2.FC3.x86_64.rpm
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/x86_ 64/debug/sharutils-debuginfo-4.2.1-22.2.FC3.x86_64.rpm


• Ubuntu sharutils-doc_4.2.1-10ubuntu0.2_all.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/s/sharutils/sharutils-doc_ 4.2.1-10ubuntu0.2_all.deb


• Ubuntu sharutils_4.2.1-10ubuntu0.2_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/s/sharutils/sharutils_4.2. 1-10ubuntu0.2_amd64.deb


• Ubuntu sharutils_4.2.1-10ubuntu0.2_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/s/sharutils/sharutils_4.2. 1-10ubuntu0.2_i386.deb


• Ubuntu sharutils_4.2.1-10ubuntu0.2_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/s/sharutils/sharutils_4.2. 1-10ubuntu0.2_powerpc.deb