CVE-2005-2670

Directory traversal vulnerability in HAURI Anti-Virus products including ViRobot Expert 4.0, Advanced Server, Linux Server 2.0, and LiveCall allows remote attackers to overwrite arbitrary files via ".." sequences in filenames contained in (1) ACE, (2) ARJ, (3) CAB, (4) LZH, (5) RAR, (6) TAR and (7) ZIP files.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2005-08-23

Last modified

2024-08-07

Affected products

• Livecall (Hauri)
• Virobot Advanced Server (Hauri)
• Virobot Expert (Hauri)
• Virobot Linux Server (Hauri)

References

• http://secunia.com/advisories/15846
• http://secunia.com/secunia_research/2005-24/advisory
• http://securitytracker.com/id?1014740
• http://www.globalhauri.com/html/download/down_unixpatch.html
• http://www.securityfocus.com/bid/14606