CVE-2005-2475
Race condition in Unzip 5.52 allows local users to modify permissions of arbitrary files via a...
Race condition in Unzip 5.52 allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by Unzip after the decompression is complete.
Exploit likelihood
What each source reports
NVD Score used
Race condition in Unzip 5.52 allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by Unzip after the decompression is complete.
- Record
CVE-2005-2475- CVSS 2.0
- 1.2 Low
AV:L/AC:H/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
Race condition in Unzip 5.52 allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by Unzip after the decompression is complete.
- Record
CVE-2005-2475- Updated
- 2026-11-02
EUVDEUVD-2005-2476 No score
Race condition in Unzip 5.52 allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by Unzip after the decompression is complete.
- Record
EUVD-2005-2476- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-3m3m-6r6c-8m58 No score
Race condition in Unzip 5.52 allows local users to modify permissions of arbitrary files via a...
Race condition in Unzip 5.52 allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by Unzip after the decompression is complete.
- Record
GHSA-3m3m-6r6c-8m58- Updated
- 2026-11-02
OSV No score
Race condition in Unzip 5.52 allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by Unzip after the decompression is complete.
- Record
CVE-2005-2475- Updated
- 2026-11-02
OSVDEBIAN-CVE-2005-2475 No score
Race condition in Unzip 5.52 allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by Unzip after the decompression is complete.
- Record
DEBIAN-CVE-2005-2475- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11485-1 No score
unzip-6.00-39.1 on GA media
These are all security issues fixed in the unzip-6.00-39.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11485-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
unzipDebian:12 |
before 5.52-4 | 5.52-4 |
unzipDebian:13 |
before 5.52-4 | 5.52-4 |
unzipDebian:14 |
before 5.52-4 | 5.52-4 |
unzipDebian:3.0 |
before 5.50-1woody5, plus listed versions 5.50-1woody25.50-1woody35.50-1woody4 |
5.50-1woody5 |
unzipDebian:3.1 |
before 5.52-1sarge3, plus listed versions 5.52-15.52-1sarge15.52-1sarge2 |
5.52-1sarge3 |
unzipRed Hat:enterprise_linux:3::as |
before 0:5.50-35.EL3 | 0:5.50-35.EL3 |
unzip-debuginfoRed Hat:enterprise_linux:3::as |
before 0:5.50-35.EL3 | 0:5.50-35.EL3 |
unzipRed Hat:enterprise_linux:3::desktop |
before 0:5.50-35.EL3 | 0:5.50-35.EL3 |
unzip-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:5.50-35.EL3 | 0:5.50-35.EL3 |
unzipRed Hat:enterprise_linux:3::es |
before 0:5.50-35.EL3 | 0:5.50-35.EL3 |
Show 12 moreShow less
| Package | Affected | Fixed |
|---|---|---|
unzip-debuginfoRed Hat:enterprise_linux:3::es |
before 0:5.50-35.EL3 | 0:5.50-35.EL3 |
unzipRed Hat:enterprise_linux:3::ws |
before 0:5.50-35.EL3 | 0:5.50-35.EL3 |
unzip-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:5.50-35.EL3 | 0:5.50-35.EL3 |
unzipRed Hat:enterprise_linux:4::as |
before 0:5.51-9.EL4.5 | 0:5.51-9.EL4.5 |
unzip-debuginfoRed Hat:enterprise_linux:4::as |
before 0:5.51-9.EL4.5 | 0:5.51-9.EL4.5 |
unzipRed Hat:enterprise_linux:4::desktop |
before 0:5.51-9.EL4.5 | 0:5.51-9.EL4.5 |
unzip-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:5.51-9.EL4.5 | 0:5.51-9.EL4.5 |
unzipRed Hat:enterprise_linux:4::es |
before 0:5.51-9.EL4.5 | 0:5.51-9.EL4.5 |
unzip-debuginfoRed Hat:enterprise_linux:4::es |
before 0:5.51-9.EL4.5 | 0:5.51-9.EL4.5 |
unzipRed Hat:enterprise_linux:4::ws |
before 0:5.51-9.EL4.5 | 0:5.51-9.EL4.5 |
unzip-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:5.51-9.EL4.5 | 0:5.51-9.EL4.5 |
unzipopenSUSE:Tumbleweed |
before 6.00-39.1 | 6.00-39.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-2475 is a low vulnerability (CVSS 1.2) in Info-zip Unzip, published August 5, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.40%, the 34th percentile. Fixed in unzip 5.52-4.
References
secunia.com/advisories/25098
info-zip.org/FAQ.html
trustix.org/errata/2005/0053
ubuntu.com/usn/usn-191-1
osvdb.org/18530
Show 38 moreShow less
securityfocus.com/bid/14450
marc.info?l=bugtraq&m=112300046224117&w=2
securityreason.com/securityalert/32
debian.org/security/2005/dsa-903
redhat.com/support/errata/RHSA-2007-0203.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9975
mandriva.com/security/advisories?name=MDKSA-2005:197
nvd.nist.gov/vuln/detail/CVE-2005-2475
github.com/advisories/GHSA-3m3m-6r6c-8m58
security-tracker.debian.org/tracker/CVE-2005-2475
access.redhat.com/errata/RHBA-2007:0418
bugzilla.redhat.com/show_bug.cgi?id=186570
security.access.redhat.com/data/csaf/v2/advisories/2007/rhba-2007_0418.json
cve.org/CVERecord?id=CVE-2005-2475
suse.com/security/cve/CVE-2005-2475