Directory traversal vulnerability in UnZip 5.50 allows attackers to overwrite arbitrary files via invalid characters between two .

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• info-zip unzip5.50
• sco openlinux server3.1.1
• sco openlinux workstation3.1.1

Package-level exposure

OSV and GitHub Advisory data: ecosystem, package and range. SBOM matching uses this table.

Other highest-scoring records for the same primary product.

• CVE-2018-1000033An out-of-bounds read exists in Info-Zip UnZip version 6.10c22 that allows an attacker to perform a denial of service and read sensitive mem
  37Monitor
• CVE-2018-1000034An out-of-bounds read exists in Info-Zip UnZip version 6.10c22 that allows an attacker to perform a denial of service and read sensitive mem
  36Monitor
• CVE-2018-1000032A heap-based buffer overflow exists in Info-Zip UnZip version 6.10c22 that allows an attacker to perform a denial of service or to possibly
  31Monitor
• CVE-2018-1000031A heap-based buffer overflow exists in Info-Zip UnZip version 6.10c22 that allows an attacker to perform a denial of service or to possibly
  31Monitor
• CVE-2015-1315Buffer overflow in the charset_to_intern function in unix/unix.c in Info-Zip UnZip 6.10b allows remote attackers to execute arbitrary code v
  31Monitor
• CVE-2005-0602Unzip 5.51 and earlier does not properly warn the user when extracting setuid or setgid files, which may allow local users to gain privilege
  24Monitor

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.

MITRE has no CAPEC/ATT&CK mapping for this CWE.