what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 1 of 1

Files

sharutil.txt

Posted Apr 6, 2004

Authored by Shaun Colley aka shaun2k2

A stack-based buffer overflow vulnerability exists in the popular shar utility packaged in the GNU sharutils distribution, due to a lack of bounds checking when handling the -o command-line option. By default, this file is not setuid nor setgid, but if used in conjunction with other tools, it is possible that this can be manipulated for nefarious purposes.

tags | advisory, overflow

SHA-256 | b6dceda7216ae56f8997fa05d3bb0b438c5ce4c248e40197d99a60a8f531c1c6

Download | Favorite | View

Related Files

sharex.c

Posted Jul 18, 2004

Authored by Adam Simuntis aka n30n | Site n30n.byte-lab.com

Sharutils 4.2.1 local root exploit. Note: shar is NOT setuid by default, so this exploit is completely proof of concept if for some reason the binary was setuid.

tags | exploit, local, root, proof of concept

SHA-256 | edd1020fd999d8177e094173be570e3a68f63ad358f7757f48ef91abc923b842

Download | Favorite | View