Skip to content

CVE-2004-1773

Multiple buffer overflows in sharutils 4.2.1 and earlier may allow attackers to execute arbitrary...

7.5 HighFix available

CVE-2004-1773 is a high vulnerability (CVSS 7.5) in Gnu Sharutils, published December 31, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.99%, the 87th percentile. Fixed in sharutils 1:4.2.1-12.

Multiple buffer overflows in sharutils 4.2.1 and earlier may allow attackers to execute arbitrary code via (1) long output from wc to shar, or (2) unknown vectors in unshar.

Exploit likelihood

2.99%Up 0.1 points since Feb 4, 2022

What each source reports

NVD Score used 7.5

Multiple buffer overflows in sharutils 4.2.1 and earlier may allow attackers to execute arbitrary code via (1) long output from wc to shar, or (2) unknown vectors in unshar.

Record: CVE-2004-1773
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated: 2026-11-02

CVE List No score

Multiple buffer overflows in sharutils 4.2.1 and earlier may allow attackers to execute arbitrary code via (1) long output from wc to shar, or (2) unknown vectors in unshar.

Record: CVE-2004-1773
Updated: 2026-11-02

EUVDEUVD-2004-1767 No score

Multiple buffer overflows in sharutils 4.2.1 and earlier may allow attackers to execute arbitrary code via (1) long output from wc to shar, or (2) unknown vectors in unshar.

Record: EUVD-2004-1767
Updated: 2026-11-03

GitHub AdvisoriesGHSA-jh4p-qrrg-9f8h No score

Multiple buffer overflows in sharutils 4.2.1 and earlier may allow attackers to execute arbitrary...

Multiple buffer overflows in sharutils 4.2.1 and earlier may allow attackers to execute arbitrary code via (1) long output from wc to shar, or (2) unknown vectors in unshar.

Record: GHSA-jh4p-qrrg-9f8h
Updated: 2026-11-02

OSV No score

Multiple buffer overflows in sharutils 4.2.1 and earlier may allow attackers to execute arbitrary code via (1) long output from wc to shar, or (2) unknown vectors in unshar.

Record: CVE-2004-1773
Updated: 2026-11-02

OSVDEBIAN-CVE-2004-1773 No score

Multiple buffer overflows in sharutils 4.2.1 and earlier may allow attackers to execute arbitrary code via (1) long output from wc to shar, or (2) unknown vectors in unshar.

Record: DEBIAN-CVE-2004-1773
Updated: 2026-11-02

Affected products

gnu sharutils

Affected packages

Affected packages
Package	Affected	Fixed
`sharutils` Debian:12	before 1:4.2.1-12	1:4.2.1-12
`sharutils` Debian:13	before 1:4.2.1-12	1:4.2.1-12
`sharutils` Debian:14	before 1:4.2.1-12	1:4.2.1-12
`sharutils` Red Hat:enterprise_linux:3::as	before 0:4.2.1-16.2	0:4.2.1-16.2
`sharutils-debuginfo` Red Hat:enterprise_linux:3::as	before 0:4.2.1-16.2	0:4.2.1-16.2
`sharutils` Red Hat:enterprise_linux:3::desktop	before 0:4.2.1-16.2	0:4.2.1-16.2
`sharutils-debuginfo` Red Hat:enterprise_linux:3::desktop	before 0:4.2.1-16.2	0:4.2.1-16.2
`sharutils` Red Hat:enterprise_linux:3::es	before 0:4.2.1-16.2	0:4.2.1-16.2
`sharutils-debuginfo` Red Hat:enterprise_linux:3::es	before 0:4.2.1-16.2	0:4.2.1-16.2
`sharutils` Red Hat:enterprise_linux:3::ws	before 0:4.2.1-16.2	0:4.2.1-16.2

Show 9 moreShow less

Affected packages
Package	Affected	Fixed
`sharutils-debuginfo` Red Hat:enterprise_linux:3::ws	before 0:4.2.1-16.2	0:4.2.1-16.2
`sharutils` Red Hat:enterprise_linux:4::as	before 0:4.2.1-22.2	0:4.2.1-22.2
`sharutils-debuginfo` Red Hat:enterprise_linux:4::as	before 0:4.2.1-22.2	0:4.2.1-22.2
`sharutils` Red Hat:enterprise_linux:4::desktop	before 0:4.2.1-22.2	0:4.2.1-22.2
`sharutils-debuginfo` Red Hat:enterprise_linux:4::desktop	before 0:4.2.1-22.2	0:4.2.1-22.2
`sharutils` Red Hat:enterprise_linux:4::es	before 0:4.2.1-22.2	0:4.2.1-22.2
`sharutils-debuginfo` Red Hat:enterprise_linux:4::es	before 0:4.2.1-22.2	0:4.2.1-22.2
`sharutils` Red Hat:enterprise_linux:4::ws	before 0:4.2.1-22.2	0:4.2.1-22.2
`sharutils-debuginfo` Red Hat:enterprise_linux:4::ws	before 0:4.2.1-22.2	0:4.2.1-22.2

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD, OSV

References

Show 19 moreShow less