Skip to content

CVE-2004-1772

Stack-based buffer overflow in shar in GNU sharutils 4.2.1 allows local users to execute...

4.6 MediumFix available

CVE-2004-1772 is a medium vulnerability (CVSS 4.6) in Gnu Sharutils, published December 31, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.65%, the 51st percentile. Fixed in sharutils 1:4.2.1-11.

Stack-based buffer overflow in shar in GNU sharutils 4.2.1 allows local users to execute arbitrary code via a long -o command line argument.

Exploit likelihood

0.65%Down 1.1 points since Feb 4, 2022

What each source reports

NVD Score used 4.6

Stack-based buffer overflow in shar in GNU sharutils 4.2.1 allows local users to execute arbitrary code via a long -o command line argument.

Record: CVE-2004-1772
CVSS 2.0: 4.6 MediumAV:L/AC:L/Au:N/C:P/I:P/A:P
Updated: 2026-11-02

CVE List No score

Stack-based buffer overflow in shar in GNU sharutils 4.2.1 allows local users to execute arbitrary code via a long -o command line argument.

Record: CVE-2004-1772
Updated: 2026-11-02

EUVDEUVD-2004-1766 No score

Stack-based buffer overflow in shar in GNU sharutils 4.2.1 allows local users to execute arbitrary code via a long -o command line argument.

Record: EUVD-2004-1766
Updated: 2026-11-03

GitHub AdvisoriesGHSA-c6qx-vg4x-8xrp No score

Stack-based buffer overflow in shar in GNU sharutils 4.2.1 allows local users to execute...

Stack-based buffer overflow in shar in GNU sharutils 4.2.1 allows local users to execute arbitrary code via a long -o command line argument.

Record: GHSA-c6qx-vg4x-8xrp
Updated: 2026-11-02

OSV No score

Stack-based buffer overflow in shar in GNU sharutils 4.2.1 allows local users to execute arbitrary code via a long -o command line argument.

Record: CVE-2004-1772
Updated: 2026-11-02

OSVDEBIAN-CVE-2004-1772 No score

Stack-based buffer overflow in shar in GNU sharutils 4.2.1 allows local users to execute arbitrary code via a long -o command line argument.

Record: DEBIAN-CVE-2004-1772
Updated: 2026-11-02

Affected products

gnu sharutils

Affected packages

Affected packages
Package	Affected	Fixed
`sharutils` Debian:12	before 1:4.2.1-11	1:4.2.1-11
`sharutils` Debian:13	before 1:4.2.1-11	1:4.2.1-11
`sharutils` Debian:14	before 1:4.2.1-11	1:4.2.1-11
`sharutils` Red Hat:enterprise_linux:3::as	before 0:4.2.1-16.2	0:4.2.1-16.2
`sharutils-debuginfo` Red Hat:enterprise_linux:3::as	before 0:4.2.1-16.2	0:4.2.1-16.2
`sharutils` Red Hat:enterprise_linux:3::desktop	before 0:4.2.1-16.2	0:4.2.1-16.2
`sharutils-debuginfo` Red Hat:enterprise_linux:3::desktop	before 0:4.2.1-16.2	0:4.2.1-16.2
`sharutils` Red Hat:enterprise_linux:3::es	before 0:4.2.1-16.2	0:4.2.1-16.2
`sharutils-debuginfo` Red Hat:enterprise_linux:3::es	before 0:4.2.1-16.2	0:4.2.1-16.2
`sharutils` Red Hat:enterprise_linux:3::ws	before 0:4.2.1-16.2	0:4.2.1-16.2

Show 9 moreShow less

Affected packages
Package	Affected	Fixed
`sharutils-debuginfo` Red Hat:enterprise_linux:3::ws	before 0:4.2.1-16.2	0:4.2.1-16.2
`sharutils` Red Hat:enterprise_linux:4::as	before 0:4.2.1-22.2	0:4.2.1-22.2
`sharutils-debuginfo` Red Hat:enterprise_linux:4::as	before 0:4.2.1-22.2	0:4.2.1-22.2
`sharutils` Red Hat:enterprise_linux:4::desktop	before 0:4.2.1-22.2	0:4.2.1-22.2
`sharutils-debuginfo` Red Hat:enterprise_linux:4::desktop	before 0:4.2.1-22.2	0:4.2.1-22.2
`sharutils` Red Hat:enterprise_linux:4::es	before 0:4.2.1-22.2	0:4.2.1-22.2
`sharutils-debuginfo` Red Hat:enterprise_linux:4::es	before 0:4.2.1-22.2	0:4.2.1-22.2
`sharutils` Red Hat:enterprise_linux:4::ws	before 0:4.2.1-22.2	0:4.2.1-22.2
`sharutils-debuginfo` Red Hat:enterprise_linux:4::ws	before 0:4.2.1-22.2	0:4.2.1-22.2

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD, OSV

References

Show 21 moreShow less