CVEvulnerability
CVE-2005-2670
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2005-08-23
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
Description
Directory traversal vulnerability in HAURI Anti-Virus products including ViRobot Expert 4.0, Advanced Server, Linux Server 2.0, and LiveCall allows remote attackers to overwrite arbitrary files via ".." sequences in filenames contained in (1) ACE, (2) ARJ, (3) CAB, (4) LZH, (5) RAR, (6) TAR and (7) ZIP files.
Affected configurations
• hauri livecall
• hauri virobot advanced server
• hauri virobot expert 4.0
• hauri virobot linux server 2.0
References
- http://secunia.com/advisories/15846 Patch, Vendor Advisory
- http://secunia.com/secunia_research/2005-24/advisory Patch, Vendor Advisory
- http://securitytracker.com/id?1014740 Patch, Vendor Advisory
- http://www.globalhauri.com/html/download/down_unixpatch.html Patch
- http://www.securityfocus.com/bid/14606 www.securityfocus.com
- http://secunia.com/advisories/15846 Patch, Vendor Advisory
- http://secunia.com/secunia_research/2005-24/advisory Patch, Vendor Advisory
- http://securitytracker.com/id?1014740 Patch, Vendor Advisory
- http://www.globalhauri.com/html/download/down_unixpatch.html Patch
- http://www.securityfocus.com/bid/14606 www.securityfocus.com