PT-2005-3435 · Gnu+1 · Tar+1

Imran Ghory · Publicado 2005-08-10 · Atualizado 2026-04-29 · CVE-2005-2541

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Tar version 1.15.1

Description The issue is related to the extraction of setuid or setgid files, where the software does not properly warn the user. This may allow local users or remote attackers to gain privileges.

Recommendations For Tar version 1.15.1, consider updating to a newer version that addresses this issue, as the current version does not properly handle the extraction of setuid or setgid files, potentially leading to privilege escalation.

Correção

Identificadores relacionados

CVE-2005-2541

ECHO-A597-344D-59BE

Produtos afetados

Debian

Tar

Referências · 7

• https://osv.dev/vulnerability/CVE-2005-2541 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-2541 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=112327628230258&w=2 · Nota
• https://lists.apache.org/thread.html/rc713534b10f9daeee2e0990239fa407e2118e4aa9e88a7041177497c%40%3Cissues.guacamole.apache.org%3E · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-2541 · Aviso do Fabricante
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-13-CVE-2005-2541 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2005-2541 · Aviso do Fabricante