Synopsis

sharutils security update

Type/Severity

Security Advisory: Low

Topic

An updated sharutils package is now available.

This update has been rated as having low security impact by the Red Hat
Security Response Team.

Description

The sharutils package contains a set of tools for encoding and decoding
packages of files in binary or text format.

A stack based overflow bug was found in the way shar handles the -o option.
If a user can be tricked into running a specially crafted command, it could
lead to arbitrary code execution. The Common Vulnerabilities and Exposures
project (cve.mitre.org) has assigned the name CAN-2004-1772 to this issue.
Please note that this issue does not affect Red Hat Enterprise Linux 4.

Two buffer overflow bugs were found in sharutils. If an attacker can place
a malicious 'wc' command on a victim's machine, or trick a victim into
running a specially crafted command, it could lead to arbitrary code
execution. The Common Vulnerabilities and Exposures project
(cve.mitre.org) has assigned the name CAN-2004-1773 to this issue.

A bug was found in the way unshar creates temporary files. A local user
could use symlinks to overwrite arbitrary files the victim running unshar
has write access to. The Common Vulnerabilities and Exposures project
(cve.mitre.org) has assigned the name CAN-2005-0990 to this issue.

All users of sharutils should upgrade to this updated package, which
includes backported fixes to correct these issues.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied. Use Red Hat
Network to download and update your packages. To launch the Red Hat
Update Agent, use the following command:

up2date

For information on how to install packages manually, refer to the
following Web page for the System Administration or Customization
guide specific to your system:

http://www.redhat.com/docs/manuals/enterprise/

Affected Products

• Red Hat Enterprise Linux Server 4 x86_64
• Red Hat Enterprise Linux Server 4 ia64
• Red Hat Enterprise Linux Server 4 i386
• Red Hat Enterprise Linux Server 3 x86_64
• Red Hat Enterprise Linux Server 3 ia64
• Red Hat Enterprise Linux Server 3 i386
• Red Hat Enterprise Linux Server 2 ia64
• Red Hat Enterprise Linux Server 2 i386
• Red Hat Enterprise Linux Workstation 4 x86_64
• Red Hat Enterprise Linux Workstation 4 ia64
• Red Hat Enterprise Linux Workstation 4 i386
• Red Hat Enterprise Linux Workstation 3 x86_64
• Red Hat Enterprise Linux Workstation 3 ia64
• Red Hat Enterprise Linux Workstation 3 i386
• Red Hat Enterprise Linux Workstation 2 ia64
• Red Hat Enterprise Linux Workstation 2 i386
• Red Hat Enterprise Linux Desktop 4 x86_64
• Red Hat Enterprise Linux Desktop 4 i386
• Red Hat Enterprise Linux Desktop 3 x86_64
• Red Hat Enterprise Linux Desktop 3 i386
• Red Hat Enterprise Linux for IBM z Systems 4 s390x
• Red Hat Enterprise Linux for IBM z Systems 4 s390
• Red Hat Enterprise Linux for IBM z Systems 3 s390x
• Red Hat Enterprise Linux for IBM z Systems 3 s390
• Red Hat Enterprise Linux for Power, big endian 4 ppc
• Red Hat Enterprise Linux for Power, big endian 3 ppc

Fixes

• BZ - 152571 - CAN-2004-1772 buffer overflow with -o option
• BZ - 152573 - CAN-2004-1773 Buffer overflows in unshar
• BZ - 154049 - CAN-2005-0990 insecure temp file usage

CVEs

• CVE-2005-0990
• CVE-2004-1773
• CVE-2004-1772

References

(none)

Red Hat Enterprise Linux Server 4

SRPM
x86_64
sharutils-4.2.1-22.2.x86_64.rpm	SHA-256: 47d850d0b742d6ef6c51b9fbb603eeb5e7ae3556d59044841038c17b77711ef3
sharutils-4.2.1-22.2.x86_64.rpm	SHA-256: 47d850d0b742d6ef6c51b9fbb603eeb5e7ae3556d59044841038c17b77711ef3
ia64
sharutils-4.2.1-22.2.ia64.rpm	SHA-256: 77269ebb785f883ca7bc8d214f5ac0081e4895c68e99fdbabe0efb6b81b99f77
sharutils-4.2.1-22.2.ia64.rpm	SHA-256: 77269ebb785f883ca7bc8d214f5ac0081e4895c68e99fdbabe0efb6b81b99f77
i386
sharutils-4.2.1-22.2.i386.rpm	SHA-256: 1cb3006bfc38f67bbf3f33a96119dc7c218be7166e258c5da7bc3240e54030d2
sharutils-4.2.1-22.2.i386.rpm	SHA-256: 1cb3006bfc38f67bbf3f33a96119dc7c218be7166e258c5da7bc3240e54030d2

Red Hat Enterprise Linux Workstation 4

SRPM
x86_64
sharutils-4.2.1-22.2.x86_64.rpm	SHA-256: 47d850d0b742d6ef6c51b9fbb603eeb5e7ae3556d59044841038c17b77711ef3
ia64
sharutils-4.2.1-22.2.ia64.rpm	SHA-256: 77269ebb785f883ca7bc8d214f5ac0081e4895c68e99fdbabe0efb6b81b99f77
i386
sharutils-4.2.1-22.2.i386.rpm	SHA-256: 1cb3006bfc38f67bbf3f33a96119dc7c218be7166e258c5da7bc3240e54030d2

Red Hat Enterprise Linux Desktop 4

SRPM
x86_64
sharutils-4.2.1-22.2.x86_64.rpm	SHA-256: 47d850d0b742d6ef6c51b9fbb603eeb5e7ae3556d59044841038c17b77711ef3
i386
sharutils-4.2.1-22.2.i386.rpm	SHA-256: 1cb3006bfc38f67bbf3f33a96119dc7c218be7166e258c5da7bc3240e54030d2

Red Hat Enterprise Linux for IBM z Systems 4

SRPM
s390x
sharutils-4.2.1-22.2.s390x.rpm	SHA-256: 60f787aa11326587297145b247dd85d06725c69f39f5f13f70432fe86b9b35be
s390
sharutils-4.2.1-22.2.s390.rpm	SHA-256: b9da3fe575942f4811e4f06441a2772dc30ba7fa82e6e078f8a3a302d3c842cc

Red Hat Enterprise Linux for Power, big endian 4

SRPM
ppc
sharutils-4.2.1-22.2.ppc.rpm	SHA-256: 4c0dd1978f2fe971657561f1bd2663414d6533ca867c9d1413023ae085cd0e0e