RHEL 2.1 : sharutils (RHSA-2003:180)

This script is Copyright (C) 2004-2014 Tenable Network Security, Inc.


Synopsis :

The remote Red Hat host is missing a security update.

Description :

Updated packages for sharutils which fix potential privilege
escalation using the uudecode utility are available.

The sharutils package contains a set of tools for encoding and
decoding packages of files in binary or text format.

The uudecode utility creates an output file without checking to see if
it was about to write to a symlink or a pipe. If a user uses uudecode
to extract data into open shared directories, such as /tmp, this
vulnerability could be used by a local attacker to overwrite files or
lead to privilege escalation.

The Common Vulnerabilities and Exposures project (cve.mitre.org) has
assigned the name CVE-2002-0178 to this issue.

Users are advised to upgrade to these errata sharutils packages which
contain a version of uudecode that has been patched to check for an
existing pipe or symlink output file.

See also :

https://www.redhat.com/security/data/cve/CVE-2002-0178.html
http://www.aerasec.de/security/index.html?id=ae-200204-033&#9001
=en
http://rhn.redhat.com/errata/RHSA-2003-180.html

Solution :

Update the affected sharutils package.

Risk factor :

High / CVSS Base Score : 7.2
(CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C)

Family: Red Hat Local Security Checks

Nessus Plugin ID: 12398 ()

Bugtraq ID:

CVE ID: CVE-2002-0178