Every CVE Search/ Get API key

CVE-2005-2945

arc 5.21j and earlier create temporary files with world-readable permissions, which allows local...

2.1 LowFix available

arc 5.21j and earlier create temporary files with world-readable permissions, which allows local users to read sensitive information from files created by (1) arc (arc.c) or (2) marc (marc.c).

Exploit likelihood

0.36%Down 0.7 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 2.1

arc 5.21j and earlier create temporary files with world-readable permissions, which allows local users to read sensitive information from files created by (1) arc (arc.c) or (2) marc (marc.c).

Record
CVE-2005-2945
CVSS 2.0
2.1 LowAV:L/AC:L/Au:N/C:P/I:N/A:N
Updated
2026-11-02
CVE List No score

arc 5.21j and earlier create temporary files with world-readable permissions, which allows local users to read sensitive information from files created by (1) arc (arc.c) or (2) marc (marc.c).

Record
CVE-2005-2945
Updated
2026-11-02
EUVDEUVD-2005-2945 No score

arc 5.21j and earlier create temporary files with world-readable permissions, which allows local users to read sensitive information from files created by (1) arc (arc.c) or (2) marc (marc.c).

Record
EUVD-2005-2945
Updated
2026-11-03
GitHub AdvisoriesGHSA-wf3w-8qhg-ch8v No score

arc 5.21j and earlier create temporary files with world-readable permissions, which allows local...

arc 5.21j and earlier create temporary files with world-readable permissions, which allows local users to read sensitive information from files created by (1) arc (arc.c) or (2) marc (marc.c).

Record
GHSA-wf3w-8qhg-ch8v
Updated
2026-11-02
OSV No score

arc 5.21j and earlier create temporary files with world-readable permissions, which allows local users to read sensitive information from files created by (1) arc (arc.c) or (2) marc (marc.c).

Record
CVE-2005-2945
Updated
2026-11-02
OSVDEBIAN-CVE-2005-2945 No score

arc 5.21j and earlier create temporary files with world-readable permissions, which allows local users to read sensitive information from files created by (1) arc (arc.c) or (2) marc (marc.c).

Record
DEBIAN-CVE-2005-2945
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
arc
Debian:12
before 5.21m-1
5.21m-1
arc
Debian:13
before 5.21m-1
5.21m-1
arc
Debian:14
before 5.21m-1
5.21m-1
arc
Debian:3.1
before 5.21l-1sarge1, plus listed versions
5.21l-1
5.21l-1sarge1

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2005-2945 is a low vulnerability (CVSS 2.1) in Arc, published September 16, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.36%, the 30th percentile. Fixed in arc 5.21m-1.

References

MoveEnter Open