CVE-2005-0602 in unzip

الملخص

بحسب MITRE

unzip 5.51 and earlier does not properly warn the user when extracting setuid or setgid files which may allow local users to gain privileges.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• حجز: 01/03/2005
• إفشاء: 02/05/2005
• الاعتدال: تمت الموافقة
• إدخال: VDB-24534
• CPE: جاهز
• CWE: غير معروف
• CVSS: 6.2 (NVD)
• EPSS: 0.00395
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2005-0602
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2005-0602
• CVE Details: https://www.cvedetails.com/cve/CVE-2005-0602/