Skip to content
OpenAdvisories
Unscored RHSA-2007:0203 2 CVEs

Red Hat Security Advisory: unzip security and bug fix update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 8

ReleasePackageFixed in
Red Hat · RHEL 4 enterprise_linux:4::as unzip 0:5.51-9.EL4.5
Red Hat · RHEL 4 enterprise_linux:4::as unzip-debuginfo 0:5.51-9.EL4.5
Red Hat · RHEL 4 enterprise_linux:4::desktop unzip 0:5.51-9.EL4.5
Red Hat · RHEL 4 enterprise_linux:4::desktop unzip-debuginfo 0:5.51-9.EL4.5
Red Hat · RHEL 4 enterprise_linux:4::es unzip 0:5.51-9.EL4.5
Red Hat · RHEL 4 enterprise_linux:4::es unzip-debuginfo 0:5.51-9.EL4.5
Red Hat · RHEL 4 enterprise_linux:4::ws unzip 0:5.51-9.EL4.5
Red Hat · RHEL 4 enterprise_linux:4::ws unzip-debuginfo 0:5.51-9.EL4.5

Vulnerabilities 2

  • Unscored —
    CVE-2005-2475

    Race condition in Unzip 5.52 allows local users to modify permissions of arbitrary files via a hard link attack on a fi…

    unzip Debian
  • Unscored —
    CVE-2005-4667 Public exploit

    Buffer overflow in UnZip 5.50 and earlier allows user-assisted attackers to execute arbitrary code via a long filename …

    unzip Debian

References

  • article
    http://www.redhat.com/security/updates/classification/#low
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=164927
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=178960
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=199104
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=230558
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0203.json
  • report
    https://access.redhat.com/security/cve/CVE-2005-2475
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617723
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2005-2475
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2005-2475
  • report
    https://access.redhat.com/security/cve/CVE-2005-4667
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617861
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2005-4667
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2005-4667