Skip to content
OpenAdvisories
Unscored RHBA-2007:0418 2 CVEs

Red Hat Bug Fix Advisory: unzip bug fix update

Published Sep 15, 2024 · Updated Jun 26, 2026

Fixed packages 8

ReleasePackageFixed in
Red Hat · RHEL 3 enterprise_linux:3::as unzip 0:5.50-35.EL3
Red Hat · RHEL 3 enterprise_linux:3::as unzip-debuginfo 0:5.50-35.EL3
Red Hat · RHEL 3 enterprise_linux:3::desktop unzip 0:5.50-35.EL3
Red Hat · RHEL 3 enterprise_linux:3::desktop unzip-debuginfo 0:5.50-35.EL3
Red Hat · RHEL 3 enterprise_linux:3::es unzip 0:5.50-35.EL3
Red Hat · RHEL 3 enterprise_linux:3::es unzip-debuginfo 0:5.50-35.EL3
Red Hat · RHEL 3 enterprise_linux:3::ws unzip 0:5.50-35.EL3
Red Hat · RHEL 3 enterprise_linux:3::ws unzip-debuginfo 0:5.50-35.EL3

Vulnerabilities 2

  • Unscored —

    Race condition in Unzip 5.52 allows local users to modify permissions of arbitrary files via a hard link attack on a fi…

  • Unscored —
    CVE-2005-4667 Public exploit

    Buffer overflow in UnZip 5.50 and earlier allows user-assisted attackers to execute arbitrary code via a long filename …

References

  • article
    http://www.redhat.com/security/updates/classification/#low
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=186570
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=226749
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2007/rhba-2007_0418.json
  • report
    https://access.redhat.com/security/cve/CVE-2005-2475
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617723
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2005-2475
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2005-2475
  • report
    https://access.redhat.com/security/cve/CVE-2005-4667
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617861
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2005-4667
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2005-4667