PT-2005-3435 · Gnu+1 · Tar+1

Imran Ghory · Published 2005-08-10 · Updated 2026-04-29 · CVE-2005-2541

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Tar version 1.15.1

Description The issue is related to the extraction of setuid or setgid files, where the software does not properly warn the user. This may allow local users or remote attackers to gain privileges.

Recommendations For Tar version 1.15.1, consider updating to a newer version that addresses this issue, as the current version does not properly handle the extraction of setuid or setgid files, potentially leading to privilege escalation.

Fix

Related Identifiers

CVE-2005-2541

ECHO-A597-344D-59BE

Affected Products

Debian

Tar

References · 7

• https://osv.dev/vulnerability/CVE-2005-2541 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-2541 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-2541 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-13-CVE-2005-2541 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2005-2541 · Vendor Advisory
• http://marc.info/?l=bugtraq&m=112327628230258&w=2 · Note
• https://lists.apache.org/thread.html/rc713534b10f9daeee2e0990239fa407e2118e4aa9e88a7041177497c%40%3Cissues.guacamole.apache.org%3E · Note