PT-2005-1650 · Info Zip · Unzip

Albert Puigsech Galicia · Publicado 2005-03-01 · Atualizado 2016-10-18 · CVE-2005-0602

Positive Technologies (AI Summary)

CVSS v2.0

6.2

Média

Vetor base

AV:L/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Unzip versions 5.51 and earlier

Description The issue is related to the extraction of setuid or setgid files, where the software does not properly warn the user. This may allow local users to gain privileges.

Recommendations For Unzip versions 5.51 and earlier, update to a version that properly handles the extraction of setuid or setgid files to prevent potential privilege escalation.

Correção

Identificadores relacionados

CVE-2005-0602

Produtos afetados

Unzip

Referências · 15

• http://securityfocus.com/bid/14447 · Nota
• http://trustix.org/errata/2005/0053 · Aviso do Fabricante
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-103150-1 · Aviso do Fabricante
• http://secunia.com/advisories/27684 · Nota
• https://osv.dev/vulnerability/CVE-2005-0602 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-0602 · Nota de Segurança
• http://secunia.com/advisories/17045 · Nota
• https://security-tracker.debian.org/tracker/CVE-2005-0602 · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=110960796331943&w=2 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-0602 · Aviso do Fabricante
• http://info-zip.org/FAQ.html · Nota
• http://secunia.com/advisories/17342 · Nota
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-200844-1 · Aviso do Fabricante
• http://mandriva.com/security/advisories?name=MDKSA-2005:197 · Aviso do Fabricante
• http://vupen.com/english/advisories/2007/3866 · Nota