CVE-2005-2670

Description

Directory traversal vulnerability in HAURI Anti-Virus products including ViRobot Expert 4.0, Advanced Server, Linux Server 2.0, and LiveCall allows remote attackers to overwrite arbitrary files via ".." sequences in filenames contained in (1) ACE, (2) ARJ, (3) CAB, (4) LZH, (5) RAR, (6) TAR and (7) ZIP files.

References

http://www.securityfocus.com/bid/14606

http://www.globalhauri.com/html/download/down_unixpatch.html

http://securitytracker.com/id?1014740

http://secunia.com/secunia_research/2005-24/advisory

http://secunia.com/advisories/15846

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS