Search 219043 CVE descriptions
and 99761 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:
Category:Red Hat Local Security Checks
Title:RedHat Security Advisory RHSA-2003:180

The remote host is missing updates announced in
advisory RHSA-2003:180.

The sharutils package contains a set of tools for encoding and decoding
packages of files in binary or text format.

The uudecode utility creates an output file without checking to see if
it was about to write to a symlink or a pipe. If a user uses uudecode to
extract data into open shared directories, such as /tmp, this vulnerability
could be used by a local attacker to overwrite files or lead to privilege

The Common Vulnerabilities and Exposures project ( has
assigned the name CVE-2002-0178 to this issue.

Users are advised to upgrade to these errata sharutils packages which
contain a version of uudecode that has been patched to check for an
existing pipe or symlink output file.

Please note that this update is available via
Red Hat Network. To use Red Hat Network, launch the Red
Hat Update Agent with the following command: up2date〈

Risk factor : High

CVSS Score:

Cross-Ref: BugTraq ID: 4742
Common Vulnerability Exposure (CVE) ID: CVE-2002-0178
Bugtraq: 20021030 GLSA: sharutils (Google Search)
Caldera Security Advisory: CSSA-2002-040.0
CERT/CC vulnerability note: VU#336083
COMPAQ Service Security Patch: SSRT2301
HPdes Security Advisory: HPSBTL0205-040
CopyrightCopyright (c) 2005 E-Soft Inc.

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.

© 1998-2021 E-Soft Inc. All rights reserved.