CVE-2005-2541

Tar 1.15.1 does not properly warn the user when extracting setuid or setgid files, which may allow local users or remote attackers to gain privileges.

CVSS v2.0 NVD

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

3.99% chance of exploitation in the next 30 days, 90th percentile

Published

2005-08-10

Updated

2024-08-07

Proof-of-concept exploits (1)

• sub148/vuln-triage

References

• CVE Record
• NVD entry

Related

• CVE-2019-1010022
• CVE-2023-44487
• CVE-2023-50387