CVE-2004-1772: GNU Sharutils

Medium severity, CVSS 4.6. EPSS: 0.6% chance of exploitation in the next 30 days.

Stack-based buffer overflow in shar in GNU sharutils 4.2.1 allows local users to execute arbitrary code via a long -o command line argument.

Affected products

• GNU Sharutils: version 4.2 only; version 4.2.1 only

Published 2004-12-31. Last modified 2026-06-16.