Every CVE Search/ Get API key

CVE-2005-2475

Race condition in Unzip 5.52 allows local users to modify permissions of arbitrary files via a...

1.2 LowFix available

Race condition in Unzip 5.52 allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by Unzip after the decompression is complete.

Exploit likelihood

0.40%Down 1.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 1.2

Race condition in Unzip 5.52 allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by Unzip after the decompression is complete.

Record
CVE-2005-2475
CVSS 2.0
1.2 LowAV:L/AC:H/Au:N/C:P/I:N/A:N
Updated
2026-11-02
CVE List No score

Race condition in Unzip 5.52 allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by Unzip after the decompression is complete.

Record
CVE-2005-2475
Updated
2026-11-02
EUVDEUVD-2005-2476 No score

Race condition in Unzip 5.52 allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by Unzip after the decompression is complete.

Record
EUVD-2005-2476
Updated
2026-11-03
GitHub AdvisoriesGHSA-3m3m-6r6c-8m58 No score

Race condition in Unzip 5.52 allows local users to modify permissions of arbitrary files via a...

Race condition in Unzip 5.52 allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by Unzip after the decompression is complete.

Record
GHSA-3m3m-6r6c-8m58
Updated
2026-11-02
OSV No score

Race condition in Unzip 5.52 allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by Unzip after the decompression is complete.

Record
CVE-2005-2475
Updated
2026-11-02
OSVDEBIAN-CVE-2005-2475 No score

Race condition in Unzip 5.52 allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by Unzip after the decompression is complete.

Record
DEBIAN-CVE-2005-2475
Updated
2026-11-02
OSVopenSUSE-SU-2024:11485-1 No score

unzip-6.00-39.1 on GA media

These are all security issues fixed in the unzip-6.00-39.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11485-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
unzip
Debian:12
 before 5.52-4
5.52-4
unzip
Debian:13
 before 5.52-4
5.52-4
unzip
Debian:14
 before 5.52-4
5.52-4
unzip
Debian:3.0
 before 5.50-1woody5, plus listed versions
5.50-1woody25.50-1woody35.50-1woody4
5.50-1woody5
unzip
Debian:3.1
 before 5.52-1sarge3, plus listed versions
5.52-15.52-1sarge15.52-1sarge2
5.52-1sarge3
unzip
Red Hat:enterprise_linux:3::as
From an advisory covering 2 CVEs
 before 0:5.50-35.EL3
0:5.50-35.EL3
unzip-debuginfo
Red Hat:enterprise_linux:3::as
From an advisory covering 2 CVEs
 before 0:5.50-35.EL3
0:5.50-35.EL3
unzip
Red Hat:enterprise_linux:3::desktop
From an advisory covering 2 CVEs
 before 0:5.50-35.EL3
0:5.50-35.EL3
unzip-debuginfo
Red Hat:enterprise_linux:3::desktop
From an advisory covering 2 CVEs
 before 0:5.50-35.EL3
0:5.50-35.EL3
unzip
Red Hat:enterprise_linux:3::es
From an advisory covering 2 CVEs
 before 0:5.50-35.EL3
0:5.50-35.EL3
Show 12 moreShow less
Affected packages
PackageAffectedFixed
unzip-debuginfo
Red Hat:enterprise_linux:3::es
From an advisory covering 2 CVEs
 before 0:5.50-35.EL3
0:5.50-35.EL3
unzip
Red Hat:enterprise_linux:3::ws
From an advisory covering 2 CVEs
 before 0:5.50-35.EL3
0:5.50-35.EL3
unzip-debuginfo
Red Hat:enterprise_linux:3::ws
From an advisory covering 2 CVEs
 before 0:5.50-35.EL3
0:5.50-35.EL3
unzip
Red Hat:enterprise_linux:4::as
From an advisory covering 2 CVEs
 before 0:5.51-9.EL4.5
0:5.51-9.EL4.5
unzip-debuginfo
Red Hat:enterprise_linux:4::as
From an advisory covering 2 CVEs
 before 0:5.51-9.EL4.5
0:5.51-9.EL4.5
unzip
Red Hat:enterprise_linux:4::desktop
From an advisory covering 2 CVEs
 before 0:5.51-9.EL4.5
0:5.51-9.EL4.5
unzip-debuginfo
Red Hat:enterprise_linux:4::desktop
From an advisory covering 2 CVEs
 before 0:5.51-9.EL4.5
0:5.51-9.EL4.5
unzip
Red Hat:enterprise_linux:4::es
From an advisory covering 2 CVEs
 before 0:5.51-9.EL4.5
0:5.51-9.EL4.5
unzip-debuginfo
Red Hat:enterprise_linux:4::es
From an advisory covering 2 CVEs
 before 0:5.51-9.EL4.5
0:5.51-9.EL4.5
unzip
Red Hat:enterprise_linux:4::ws
From an advisory covering 2 CVEs
 before 0:5.51-9.EL4.5
0:5.51-9.EL4.5
unzip-debuginfo
Red Hat:enterprise_linux:4::ws
From an advisory covering 2 CVEs
 before 0:5.51-9.EL4.5
0:5.51-9.EL4.5
unzip
openSUSE:Tumbleweed
From an advisory covering 5 CVEs
 before 6.00-39.1
6.00-39.1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2005-2475 is a low vulnerability (CVSS 1.2) in Info-zip Unzip, published August 5, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.40%, the 34th percentile. Fixed in unzip 5.52-4.

References

Show 38 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open