CVE-2005-0602

Description

Unzip 5.51 and earlier does not properly warn the user when extracting setuid or setgid files, which may allow local users to gain privileges.

Affected Platforms

Weakness Type

NVD-CWE-Other

References

• http://marc.info/?l=bugtraq&m=110960796331943&w=2
• http://secunia.com/advisories/17045
• http://secunia.com/advisories/17342
• http://secunia.com/advisories/27684
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-103150-1
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-200844-1