CVE-2005-0602

Unzip 5.51 and earlier does not properly warn the user when extracting setuid or setgid files,...

6.2 MediumFix available

Unzip 5.51 and earlier does not properly warn the user when extracting setuid or setgid files, which may allow local users to gain privileges.

Exploit likelihood

0.40%Down 0.9 points since Feb 4, 2022

What each source reports

NVD Score used 6.2

Unzip 5.51 and earlier does not properly warn the user when extracting setuid or setgid files, which may allow local users to gain privileges.

Record: CVE-2005-0602
CVSS 2.0: 6.2 MediumAV:L/AC:H/Au:N/C:C/I:C/A:C
Updated: 2026-11-02

CVE List No score

Unzip 5.51 and earlier does not properly warn the user when extracting setuid or setgid files, which may allow local users to gain privileges.

Record: CVE-2005-0602
Updated: 2026-11-02

EUVDEUVD-2005-0603 No score

Unzip 5.51 and earlier does not properly warn the user when extracting setuid or setgid files, which may allow local users to gain privileges.

Record: EUVD-2005-0603
Updated: 2026-11-03

GitHub AdvisoriesGHSA-h78h-jj63-v974 No score

Unzip 5.51 and earlier does not properly warn the user when extracting setuid or setgid files,...

Unzip 5.51 and earlier does not properly warn the user when extracting setuid or setgid files, which may allow local users to gain privileges.

Record: GHSA-h78h-jj63-v974
Updated: 2026-11-02

OSV No score

Unzip 5.51 and earlier does not properly warn the user when extracting setuid or setgid files, which may allow local users to gain privileges.

Record: CVE-2005-0602
Updated: 2026-11-02

OSVDEBIAN-CVE-2005-0602 No score

Unzip 5.51 and earlier does not properly warn the user when extracting setuid or setgid files, which may allow local users to gain privileges.

Record: DEBIAN-CVE-2005-0602
Updated: 2026-11-02

Affected products

info-zip unzip

Affected packages

Affected packages
Package	Affected	Fixed
`unzip` Debian:12	before 5.52-1	5.52-1
`unzip` Debian:13	before 5.52-1	5.52-1
`unzip` Debian:14	before 5.52-1	5.52-1

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2005-0602 is a medium vulnerability (CVSS 6.2) in Info-zip Unzip, published March 1, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.40%, the 33rd percentile. Fixed in unzip 5.52-1.

References

Show 8 moreShow less