6.2

CVE-2005-0602

EPSS 0.12%
Veröffentlicht 02.05.2005 04:00:00
Zuletzt bearbeitet 03.04.2025 01:03:51
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Unzip 5.51 and earlier does not properly warn the user when extracting setuid or setgid files, which may allow local users to gain privileges.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 14

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Info-zip ≫ Unzip Version <= 5.51

Info-zip ≫ Unzip Version5.50

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.12%	0.308

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	6.2	1.9	10	AV:L/AC:H/Au:N/C:C/I:C/A:C

http://www.info-zip.org/FAQ.html

http://marc.info/?l=bugtraq&m=110960796331943&w=2

http://secunia.com/advisories/17045

http://secunia.com/advisories/17342

http://secunia.com/advisories/27684

http://sunsolve.sun.com/search/document.do?assetkey=1-26-103150-1

http://sunsolve.sun.com/search/document.do?assetkey=1-66-200844-1

http://www.mandriva.com/security/advisories?name=MDKSA-2005:197

http://www.securityfocus.com/bid/14447

http://www.trustix.org/errata/2005/0053/

http://www.vupen.com/english/advisories/2007/3866

https://nvd.nist.gov/vuln/detail/CVE-2005-0602

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2005-0602

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2005-0602

EUVD