Total vulnerabilities in the database
uudecode, as available in the sharutils package before 4.2.1, does not check whether the filename of the uudecoded file is a pipe or symbolic link, which could allow attackers to overwrite files or execute commands.
| Software | From | Fixed in |
|---|---|---|
| gnu / sharutils | 4.2 | 4.2.x |