CVE-2005-0602 - Secunia Advisories - Vulnerability Intelligence

CVE Reference: CVE-2005-0602
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2005-0602

Description: Unzip 5.51 and earlier does not properly warn the user when extracting setuid or setgid files, which may allow local users to gain privileges.

CVE Status: Candidate

References: TRUSTIX http://www.trustix.org/errata/2005/0053/ SUNALERT http://sunsolve.sun.com/search/document.do?assetkey=1-26-103150-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-200844-1 SAID Secunia Advisory: SA17045 Secunia Advisory: SA17342 Secunia Advisory: SA27684 MANDRIVA http://www.mandriva.com/security/advisories?name=MDKSA-2005:197 BUGTRAQ http://marc.theaimsgroup.com/?l=bugtraq&m=110960796331943&w=2 BID 14447

Return to the previous page.