CVE-2005-2541

Description

Tar 1.15.1 does not properly warn the user when extracting setuid or setgid files, which may allow local users or remote attackers to gain privileges.

Risk Information

Base Score

7.0

MODERATE

Vector

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

2.806

Associated Vulnerability

Vulnerability	OS Platform
Multiple Vulnerabilities are affected in GNU Tar 1.15.1	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234