Bug 15336

Summary:	unzip security issue
Product:	Busybox	Reporter:	nimrod.stoler
Component:	Other	Assignee:	unassigned
Status:	NEW ---
Severity:	normal	CC:	busybox-cvs
Priority:	P5
Version:	1.35.x
Target Milestone:	---
Hardware:	All
OS:	Linux
Host:		Target:
Build:

Description nimrod.stoler 2023-02-14 10:27:05 UTC

Hello,

During our review of an embedded product we discovered that we can escalate our privileges using busybox’s unzip utility.

We kindly like to disclose the specifics to you or to anyone dealing with security on your side.