CVE-2005-2541

Vulnerability in Tar 1.15.1 fails to properly warn users when extracting files with setuid or setgid bits set. This could allow local or remote attackers to escalate privileges.

The risk is that users may unknowingly extract malicious archives containing files with elevated permissions, potentially leading to unauthorized access or privilege escalation on the system.

It is recommended to update Tar to a newer version that properly warns about setuid/setgid files. Also consider using the --no-same-permissions option when extracting archives from untrusted sources.