Lucene search

K
cve[email protected]CVE-2005-2541
HistoryAug 10, 2005 - 4:00 a.m.

CVE-2005-2541

2005-08-1004:00:00
NVD-CWE-Other
web.nvd.nist.gov
73
cve-2005-2541
tar
extraction
vulnerability
privilege escalation
nvd

9 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.006 Low

EPSS

Percentile

78.8%

Tar 1.15.1 does not properly warn the user when extracting setuid or setgid files, which may allow local users or remote attackers to gain privileges.

CPENameOperatorVersion
gnu:targnu tareq1.15.1

9 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.006 Low

EPSS

Percentile

78.8%

Related for CVE-2005-2541