CVE-2005-2475: Race condition in Unzip 5.52 allows local users to modify permissions of arbitrary files via a hard link at...

Security readout for executives and security teams

CVE-2005-2475 is a local race condition in Unzip 5.52. A local user may be able to abuse hard links during extraction so Unzip changes permissions on a file the attacker chooses. This is not described as remotely exploitable in the provided sources, but it can matter on shared systems. Exposure is most likely on older systems running Unzip 5.52 or affected vendor packages, especially multi-user hosts or automation that extracts archives in locations reachable by untrusted local users. The provided affected-product metadata is incomplete. Treat this as a moderate legacy hygiene issue. Prioritize shared Unix-like systems, build servers, hosting environments, and archive-processing workflows where local users or tenants may influence extraction paths. Mitigation focus: Check the operating-system vendor advisory for patched Unzip packages.; Upgrade or replace affected Unzip 5.52 packages where vendor updates exist.; Avoid privileged extraction of untrusted archives on shared writable paths..

Prepared

Jun 29, 2026, 18:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.