Vulnerabilities > CVE-2005-2541 - Unspecified vulnerability in GNU TAR 1.15.1

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
gnu
NVD
Published: 2005-08-10
Updated: 2024-11-20

Summary

Tar 1.15.1 does not properly warn the user when extracting setuid or setgid files, which may allow local users or remote attackers to gain privileges.

Vulnerable Configurations

Part Description Count
Application
Gnu
1

Statements

contributorMark J Cox
lastmodified2006-08-30
organizationRed Hat
statementThis is the documented and expected behaviour of tar.

References