CVE-2005-0602: Unzip 5.51 and earlier does not properly warn the user when extracting setuid or setgid files, which may al...

Security readout for executives and security teams

Unzip 5.51 and earlier may extract files with setuid or setgid permission behavior without properly warning the user. If a local user can influence what gets extracted, especially by an administrator or automated job, this can create an opportunity for privilege gain. Exposure is most likely on older Unix or Linux systems that still have Unzip 5.51 or earlier, or legacy vendor packages referenced by Trustix, Mandriva, and Sun advisories. Systems where privileged users or jobs extract untrusted archives have higher practical risk. Treat as a legacy hygiene issue with privilege escalation impact. It is not presented as actively exploited, but old Unix systems and privileged archive workflows should be checked because the risk increases when untrusted files are handled with elevated permissions. Mitigation focus: Inventory installed Unzip versions across legacy Unix and Linux systems.; Apply vendor package updates where available from the operating system provider.; Avoid extracting untrusted archives as root or privileged service accounts..

Prepared

Jun 29, 2026, 23:55 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.