A stack-based buffer overflow vulnerability exists in the popular shar utility packaged in the GNU sharutils distribution, due to a lack of bounds checking when handling the -o command-line option. By default, this file is not setuid nor setgid, but if used in conjunction with other tools, it is possible that this can be manipulated for nefarious purposes.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/33022/sharutil.txt
Source: https://packetstormsecurity.com/files/33022/sharutil.txt.html