shtool vulnerabilities and fixes
Recent CVEs affecting shtool, with upgrade or downgrade steps. 2 tracked.
shtool has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2005-06-28. Highest priority: CVE-2005-1751 (score 21/100).
- CVE-2005-1759 LOW 1.2 UPGRADE Race condition in shtool 2.0.1 and earlier allows local users to modify or create arbitrary files via a symlin
- CVE-2005-1751 LOW 3.7 UPGRADE Race condition in shtool 2.0.1 and earlier allows local users to create or modify arbitrary files via a symlin
FAQ
How do I fix shtool vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is shtool being exploited right now?
None of the tracked shtool CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which shtool CVE should I patch first?
CVE-2005-1751 currently ranks highest (21/100): Race condition in shtool 2.0.1 and earlier allows local users to create or modify arbitrary files via a symlin.