CVE-2002-0178
- State
- Published
- Severity
- Not scored
- Published
- Apr 2, 2003
- Updated
- Aug 8, 2024
- Reserved
- Apr 17, 2002
Description
uudecode, as available in the sharutils package before 4.2.1, does not check whether the filename of the uudecoded file is a pipe or symbolic link, which could allow attackers to overwrite files or execute commands.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 4742vdb-entry
- 20021030 GLSA: sharutilsmailing-list
- MDKSA-2002:052vendor-advisory
- RHSA-2003:180vendor-advisory
- VU#336083third-party-advisory
- 8274vdb-entry
- http://www.aerasec.de/security/index.html?id=ae-200204-033&lang=en
- RHSA-2002:065vendor-advisory
- sharutils-uudecode-symlink(9075)vdb-entry
- HPSBTL0205-040vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.