CVE-2003-0282: Info-Zip Unzip

Low severity, CVSS 2.6. EPSS: 22% chance of exploitation in the next 30 days.

Directory traversal vulnerability in UnZip 5.50 allows attackers to overwrite arbitrary files via invalid characters between two . (dot) characters, which are filtered and result in a ".." sequence.

Affected products

• Info-Zip Unzip: version 5.50 only
• Sco Openlinux Server: version 3.1.1 only
• Sco Openlinux Workstation: version 3.1.1 only

Published 2003-06-16. Last modified 2026-06-16.