PT-2005-1650 · Info Zip · Unzip

Albert Puigsech Galicia · Published 2005-03-01 · Updated 2016-10-18 · CVE-2005-0602

Positive Technologies (AI Summary)

CVSS v2.0

6.2

Medium

Base vector

AV:L/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Unzip versions 5.51 and earlier

Description The issue is related to the extraction of setuid or setgid files, where the software does not properly warn the user. This may allow local users to gain privileges.

Recommendations For Unzip versions 5.51 and earlier, update to a version that properly handles the extraction of setuid or setgid files to prevent potential privilege escalation.

Fix

Related Identifiers

CVE-2005-0602

Affected Products

Unzip

References · 15

• http://trustix.org/errata/2005/0053 · Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-103150-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2005-0602 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-0602 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2005-0602 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-0602 · Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-200844-1 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2005:197 · Vendor Advisory
• http://securityfocus.com/bid/14447 · Note
• http://secunia.com/advisories/27684 · Note
• http://secunia.com/advisories/17045 · Note
• http://marc.info/?l=bugtraq&m=110960796331943&w=2 · Note
• http://info-zip.org/FAQ.html · Note
• http://secunia.com/advisories/17342 · Note
• http://vupen.com/english/advisories/2007/3866 · Note