CVE-2005-2541: GNU Tar

High severity, CVSS 10.0. EPSS: 4% chance of exploitation in the next 30 days.

Tar 1.15.1 does not properly warn the user when extracting setuid or setgid files, which may allow local users or remote attackers to gain privileges.

Affected products

• GNU Tar: version 1.15.1 only

Published 2005-08-10. Last modified 2026-06-16.