Описание
Unzip 5.51 and earlier does not properly warn the user when extracting setuid or setgid files, which may allow local users to gain privileges.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| unzip | fixed | 5.52-1 | package |
Примечания
um, tar does this too, not really considered a security hole
EPSS
Процентиль: 35%
0.00143
Низкий
Связанные уязвимости
ubuntu
почти 21 год назад
Unzip 5.51 and earlier does not properly warn the user when extracting setuid or setgid files, which may allow local users to gain privileges.
nvd
почти 21 год назад
Unzip 5.51 and earlier does not properly warn the user when extracting setuid or setgid files, which may allow local users to gain privileges.
github
почти 4 года назад
Unzip 5.51 and earlier does not properly warn the user when extracting setuid or setgid files, which may allow local users to gain privileges.
EPSS
Процентиль: 35%
0.00143
Низкий