CVE-2004-1773

Multiple buffer overflows in sharutils 4.2.1 and earlier may allow attackers to execute arbitrary...

7.5 HighFix available

Multiple buffer overflows in sharutils 4.2.1 and earlier may allow attackers to execute arbitrary code via (1) long output from wc to shar, or (2) unknown vectors in unshar.

Exploit likelihood

2.99%Up 0.1 points since Feb 4, 2022

What each source reports

NVD Score used7.5

Multiple buffer overflows in sharutils 4.2.1 and earlier may allow attackers to execute arbitrary code via (1) long output from wc to shar, or (2) unknown vectors in unshar.

Record: CVE-2004-1773
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated: 2026-11-02

CVE ListNo score

Multiple buffer overflows in sharutils 4.2.1 and earlier may allow attackers to execute arbitrary code via (1) long output from wc to shar, or (2) unknown vectors in unshar.

Record: CVE-2004-1773
Updated: 2026-11-02

EUVDEUVD-2004-1767No score

Multiple buffer overflows in sharutils 4.2.1 and earlier may allow attackers to execute arbitrary code via (1) long output from wc to shar, or (2) unknown vectors in unshar.

Record: EUVD-2004-1767
Updated: 2026-11-03

GitHub AdvisoriesGHSA-jh4p-qrrg-9f8hNo score

Multiple buffer overflows in sharutils 4.2.1 and earlier may allow attackers to execute arbitrary...

Multiple buffer overflows in sharutils 4.2.1 and earlier may allow attackers to execute arbitrary code via (1) long output from wc to shar, or (2) unknown vectors in unshar.

Record: GHSA-jh4p-qrrg-9f8h
Updated: 2026-11-02

OSVNo score

Multiple buffer overflows in sharutils 4.2.1 and earlier may allow attackers to execute arbitrary code via (1) long output from wc to shar, or (2) unknown vectors in unshar.

Record: CVE-2004-1773
Updated: 2026-11-02

OSVDEBIAN-CVE-2004-1773No score

Multiple buffer overflows in sharutils 4.2.1 and earlier may allow attackers to execute arbitrary code via (1) long output from wc to shar, or (2) unknown vectors in unshar.

Record: DEBIAN-CVE-2004-1773
Updated: 2026-11-02

Affected products

gnu sharutils

Affected packages

Affected packages
Package	Affected	Fixed
`sharutils` Debian:12	before 1:4.2.1-12	1:4.2.1-12
`sharutils` Debian:13	before 1:4.2.1-12	1:4.2.1-12
`sharutils` Debian:14	before 1:4.2.1-12	1:4.2.1-12
`sharutils` Red Hat:enterprise_linux:3::as From an advisory covering 3 CVEs	before 0:4.2.1-16.2	0:4.2.1-16.2
`sharutils-debuginfo` Red Hat:enterprise_linux:3::as From an advisory covering 3 CVEs	before 0:4.2.1-16.2	0:4.2.1-16.2
`sharutils` Red Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs	before 0:4.2.1-16.2	0:4.2.1-16.2
`sharutils-debuginfo` Red Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs	before 0:4.2.1-16.2	0:4.2.1-16.2
`sharutils` Red Hat:enterprise_linux:3::es From an advisory covering 3 CVEs	before 0:4.2.1-16.2	0:4.2.1-16.2
`sharutils-debuginfo` Red Hat:enterprise_linux:3::es From an advisory covering 3 CVEs	before 0:4.2.1-16.2	0:4.2.1-16.2
`sharutils` Red Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs	before 0:4.2.1-16.2	0:4.2.1-16.2

Show 9 moreShow less

Affected packages
Package	Affected	Fixed
`sharutils-debuginfo` Red Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs	before 0:4.2.1-16.2	0:4.2.1-16.2
`sharutils` Red Hat:enterprise_linux:4::as From an advisory covering 3 CVEs	before 0:4.2.1-22.2	0:4.2.1-22.2
`sharutils-debuginfo` Red Hat:enterprise_linux:4::as From an advisory covering 3 CVEs	before 0:4.2.1-22.2	0:4.2.1-22.2
`sharutils` Red Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs	before 0:4.2.1-22.2	0:4.2.1-22.2
`sharutils-debuginfo` Red Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs	before 0:4.2.1-22.2	0:4.2.1-22.2
`sharutils` Red Hat:enterprise_linux:4::es From an advisory covering 3 CVEs	before 0:4.2.1-22.2	0:4.2.1-22.2
`sharutils-debuginfo` Red Hat:enterprise_linux:4::es From an advisory covering 3 CVEs	before 0:4.2.1-22.2	0:4.2.1-22.2
`sharutils` Red Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs	before 0:4.2.1-22.2	0:4.2.1-22.2
`sharutils-debuginfo` Red Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs	before 0:4.2.1-22.2	0:4.2.1-22.2

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2004-1773 is a high vulnerability (CVSS 7.5) in Gnu Sharutils, published December 31, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.99%, the 87th percentile. Fixed in sharutils 1:4.2.1-12.

References

Show 19 moreShow less