Every CVE Search/ Get API key

CVE-2002-0178

uudecode, as available in the sharutils package before 4.2.1, does not check whether the filename...

7.2 High

CVE-2002-0178 is a high vulnerability (CVSS 7.2) in Gnu Sharutils, published May 29, 2002. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.62%, the 49th percentile. No source names a fixed version.

uudecode, as available in the sharutils package before 4.2.1, does not check whether the filename of the uudecoded file is a pipe or symbolic link, which could allow attackers to overwrite files or execute commands.

Exploit likelihood

0.62%Down 0.7 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.2

uudecode, as available in the sharutils package before 4.2.1, does not check whether the filename of the uudecoded file is a pipe or symbolic link, which could allow attackers to overwrite files or execute commands.

Record
CVE-2002-0178
CVSS 2.0
7.2 HighAV:L/AC:L/Au:N/C:C/I:C/A:C
Updated
2026-11-02
CVE List No score

uudecode, as available in the sharutils package before 4.2.1, does not check whether the filename of the uudecoded file is a pipe or symbolic link, which could allow attackers to overwrite files or execute commands.

Record
CVE-2002-0178
Updated
2026-11-02
EUVDEUVD-2002-0176 No score

uudecode, as available in the sharutils package before 4.2.1, does not check whether the filename of the uudecoded file is a pipe or symbolic link, which could allow attackers to overwrite files or execute commands.

Record
EUVD-2002-0176
Updated
2026-11-03
GitHub AdvisoriesGHSA-wwhg-qw2q-mpr3 No score

uudecode, as available in the sharutils package before 4.2.1, does not check whether the filename...

uudecode, as available in the sharutils package before 4.2.1, does not check whether the filename of the uudecoded file is a pipe or symbolic link, which could allow attackers to overwrite files or execute commands.

Record
GHSA-wwhg-qw2q-mpr3
Updated
2026-11-02

Affected products

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD

References

Show 6 moreShow less
MoveEnter Open