CVE

Id
4571  
CVE No.
CVE-2002-0178  
Status
Entry  
Description
uudecode, as available in the sharutils package before 4.2.1, does not check whether the filename of the uudecoded file is a pipe or symbolic link, which could allow attackers to overwrite files or execute commands.  
Phase
 
Votes
 
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
22778 4571 CVE-2002-0178 MISC:http://www.aerasec.de/security/index.html?id=ae-200204-033&lang=en  View
22779 4571 CVE-2002-0178 REDHAT:RHSA-2002:065  View
22780 4571 CVE-2002-0178 URL:http://www.redhat.com/support/errata/RHSA-2002-065.html  View
22781 4571 CVE-2002-0178 HP:HPSBTL0205-040  View
22782 4571 CVE-2002-0178 URL:http://online.securityfocus.com/advisories/4132  View
22783 4571 CVE-2002-0178 MANDRAKE:MDKSA-2002:052  View
22784 4571 CVE-2002-0178 URL:http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-052.php  View
22785 4571 CVE-2002-0178 REDHAT:RHSA-2003:180  View
22786 4571 CVE-2002-0178 URL:http://www.redhat.com/support/errata/RHSA-2003-180.html  View
22787 4571 CVE-2002-0178 XF:sharutils-uudecode-symlink(9075)  View
22788 4571 CVE-2002-0178 URL:http://www.iss.net/security_center/static/9075.php  View
22789 4571 CVE-2002-0178 BID:4742  View
22790 4571 CVE-2002-0178 URL:http://www.securityfocus.com/bid/4742  View
22791 4571 CVE-2002-0178 BUGTRAQ:20021030 GLSA: sharutils  View
22792 4571 CVE-2002-0178 URL:http://marc.info/?l=bugtraq&m=103599320902432&w=2  View
22793 4571 CVE-2002-0178 CERT-VN:VU#336083  View
22794 4571 CVE-2002-0178 URL:http://www.kb.cert.org/vuls/id/336083  View
22795 4571 CVE-2002-0178 CALDERA:CSSA-2002-040.0  View
22796 4571 CVE-2002-0178 URL:ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-040.0.txt  View
22797 4571 CVE-2002-0178 COMPAQ:SSRT2301  View
22798 4571 CVE-2002-0178 OSVDB:8274  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63763 JVNDB-2002-000090 Red Hat Linux の sharutils パッケージの uudecode 処理におけるファイルが上書きされる脆弱性 Red Hat Linux の sharutils に含まれる uudecode において、 /tmp のような、安全ではないディレクトリ内に uudecode の復号化されたデータが格納される場合、ファイルの名前と種類、そしてユーザ所有権のチェックをデータの出力前に実行しないため、ファイルの上書きを実行される脆弱性が存在しまsu CVE-2002-0178 4571 7.2 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000090.html  View