Skip to content

CVE-2005-0990

unshar (unshar.c) in sharutils 4.2.1 allows local users to overwrite arbitrary files via a...

2.1 LowFix available

CVE-2005-0990 is a low vulnerability (CVSS 2.1) in Gnu Sharutils, published April 6, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.36%, the 30th percentile. Fixed in sharutils 1:4.2.1-13.

unshar (unshar.c) in sharutils 4.2.1 allows local users to overwrite arbitrary files via a symlink attack on the unsh.X temporary file.

Exploit likelihood

0.36%Down 0.7 points since Feb 4, 2022

What each source reports

NVD Score used 2.1

unshar (unshar.c) in sharutils 4.2.1 allows local users to overwrite arbitrary files via a symlink attack on the unsh.X temporary file.

Record: CVE-2005-0990
CVSS 2.0: 2.1 LowAV:L/AC:L/Au:N/C:N/I:P/A:N
Updated: 2026-11-02

CVE List No score

unshar (unshar.c) in sharutils 4.2.1 allows local users to overwrite arbitrary files via a symlink attack on the unsh.X temporary file.

Record: CVE-2005-0990
Updated: 2026-11-02

EUVDEUVD-2005-0991 No score

unshar (unshar.c) in sharutils 4.2.1 allows local users to overwrite arbitrary files via a symlink attack on the unsh.X temporary file.

Record: EUVD-2005-0991
Updated: 2026-11-03

GitHub AdvisoriesGHSA-358m-xcjh-x4vp No score

unshar (unshar.c) in sharutils 4.2.1 allows local users to overwrite arbitrary files via a...

unshar (unshar.c) in sharutils 4.2.1 allows local users to overwrite arbitrary files via a symlink attack on the unsh.X temporary file.

Record: GHSA-358m-xcjh-x4vp
Updated: 2026-11-02

OSV No score

unshar (unshar.c) in sharutils 4.2.1 allows local users to overwrite arbitrary files via a symlink attack on the unsh.X temporary file.

Record: CVE-2005-0990
Updated: 2026-11-02

OSVDEBIAN-CVE-2005-0990 No score

unshar (unshar.c) in sharutils 4.2.1 allows local users to overwrite arbitrary files via a symlink attack on the unsh.X temporary file.

Record: DEBIAN-CVE-2005-0990
Updated: 2026-11-02

Affected products

gnu sharutils

Affected packages

Affected packages
Package	Affected	Fixed
`sharutils` Debian:12	before 1:4.2.1-13	1:4.2.1-13
`sharutils` Debian:13	before 1:4.2.1-13	1:4.2.1-13
`sharutils` Debian:14	before 1:4.2.1-13	1:4.2.1-13
`sharutils` Red Hat:enterprise_linux:3::as	before 0:4.2.1-16.2	0:4.2.1-16.2
`sharutils-debuginfo` Red Hat:enterprise_linux:3::as	before 0:4.2.1-16.2	0:4.2.1-16.2
`sharutils` Red Hat:enterprise_linux:3::desktop	before 0:4.2.1-16.2	0:4.2.1-16.2
`sharutils-debuginfo` Red Hat:enterprise_linux:3::desktop	before 0:4.2.1-16.2	0:4.2.1-16.2
`sharutils` Red Hat:enterprise_linux:3::es	before 0:4.2.1-16.2	0:4.2.1-16.2
`sharutils-debuginfo` Red Hat:enterprise_linux:3::es	before 0:4.2.1-16.2	0:4.2.1-16.2
`sharutils` Red Hat:enterprise_linux:3::ws	before 0:4.2.1-16.2	0:4.2.1-16.2

Show 9 moreShow less

Affected packages
Package	Affected	Fixed
`sharutils-debuginfo` Red Hat:enterprise_linux:3::ws	before 0:4.2.1-16.2	0:4.2.1-16.2
`sharutils` Red Hat:enterprise_linux:4::as	before 0:4.2.1-22.2	0:4.2.1-22.2
`sharutils-debuginfo` Red Hat:enterprise_linux:4::as	before 0:4.2.1-22.2	0:4.2.1-22.2
`sharutils` Red Hat:enterprise_linux:4::desktop	before 0:4.2.1-22.2	0:4.2.1-22.2
`sharutils-debuginfo` Red Hat:enterprise_linux:4::desktop	before 0:4.2.1-22.2	0:4.2.1-22.2
`sharutils` Red Hat:enterprise_linux:4::es	before 0:4.2.1-22.2	0:4.2.1-22.2
`sharutils-debuginfo` Red Hat:enterprise_linux:4::es	before 0:4.2.1-22.2	0:4.2.1-22.2
`sharutils` Red Hat:enterprise_linux:4::ws	before 0:4.2.1-22.2	0:4.2.1-22.2
`sharutils-debuginfo` Red Hat:enterprise_linux:4::ws	before 0:4.2.1-22.2	0:4.2.1-22.2

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD, OSV

References

Show 21 moreShow less