CVE-2003-0282: Directory traversal vulnerability in UnZip 5.50 allows attackers to overwrite arbitrary files via invalid c...

Security readout for executives and security teams

CVE-2003-0282 is an old UnZip 5.50 flaw where a specially crafted archive path could escape the intended extraction folder and overwrite files. Business risk depends on whether vulnerable UnZip is still present and used on untrusted ZIP files. The source bundle does not provide CVSS, affected platform detail, or evidence of active exploitation. Exposure is most likely on legacy systems, embedded appliances, old Linux distributions, or applications that still invoke Info-ZIP UnZip 5.50 on uploaded or received archives. Modern exposure cannot be assumed from the bundle alone. Treat this as a legacy exposure cleanup item unless vulnerable UnZip is used in internet-facing or automated archive processing. Prioritize confirmation of presence first, then patch or retire vulnerable tooling where found. Mitigation focus: Inventory systems and applications that invoke Info-ZIP UnZip.; Replace or update UnZip 5.50 using applicable vendor advisories.; Avoid processing untrusted ZIP archives with vulnerable tooling..

Prepared

Jun 30, 2026, 10:57 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.