CVE-2005-4667

2005-12-3100:00:00

ubuntu.com

CVSS2

3.7

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:H/Au:N/C:P/I:P/A:P

EPSS

0.002

Percentile

58.8%

JSON

Buffer overflow in UnZip 5.50 and earlier allows user-assisted attackers to
execute arbitrary code via a long filename command line argument. NOTE:
since the overflow occurs in a non-setuid program, there are not many
scenarios under which it poses a vulnerability, unless unzip is passed long
arguments when it is invoked from other programs.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchunzip< 5.52-6ubuntu4UNKNOWN
ubuntu6.10noarchunzip< 5.52-6ubuntu4UNKNOWN
ubuntu7.04noarchunzip< 5.52-6ubuntu4UNKNOWN