Unscored severity · published May 2, 2005
CVE-2005-0602
Unzip 5.51 and earlier does not properly warn the user when extracting setuid or setgid files, which may allow local users to gain privileges
–
CVSS
0.4%
EPSS
No
On KEV
Description
Unzip 5.51 and earlier does not properly warn the user when extracting setuid or setgid files, which may allow local users to gain privileges.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 34% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
UN
Unzip · Info-zip
through 5.51; 5.50 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-0602
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-0602
marc.info
http://marc.info/?l=bugtraq&m=110960796331943&w=2
secunia.com
http://secunia.com/advisories/17045
secunia.com
http://secunia.com/advisories/17342
secunia.com
http://secunia.com/advisories/27684
sunsolve.sun.com
http://sunsolve.sun.com/search/document.do?assetkey=1-26-103150-1
sunsolve.sun.com
http://sunsolve.sun.com/search/document.do?assetkey=1-66-200844-1
More from Unzip
9.1
CVE-2018-1000034
An out-of-bounds read exists in Info-Zip UnZip version 6.10c22 that allows an attacker to perform a denial of service and read sensitive memory
9.1
CVE-2018-1000033
An out-of-bounds read exists in Info-Zip UnZip version 6.10c22 that allows an attacker to perform a denial of service and read sensitive memory
7.8
CVE-2018-1000032
A heap-based buffer overflow exists in Info-Zip UnZip version 6.10c22 that allows an attacker to perform a denial of service or to possibly achieve code execution
7.8
CVE-2018-1000031
A heap-based buffer overflow exists in Info-Zip UnZip version 6.10c22 that allows an attacker to perform a denial of service or to possibly achieve code execution
–
CVE-2015-1315
Buffer overflow in the charset_to_intern function in unix/unix.c in Info-Zip UnZip 6.10b allows remote attackers to execute arbitrary code via a crafted string, as demonstrated by…