CVE-2005-0602
MEDIUM 6.2EPSS 0.4%
Unzip 5.51 and earlier does not properly warn the user when extracting setuid or setgid files, which may allow local users to gain privileges.
- CVSS v2.0 NVD
- 6.2 MEDIUM
AV:L/AC:H/Au:N/C:C/I:C/A:C - EPSS
- 0.40% chance of exploitation in the next 30 days, 32nd percentile
- Published
- 2005-03-01
- Updated
- 2024-08-07
Proof-of-concept exploits (1)
- ronomon/zip258★ · 2020-07-27
Security advisories
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:197
- http://www.securityfocus.com/bid/14447