CVE-2005-2670
Directory traversal vulnerability in HAURI Anti-Virus products including ViRobot Expert 4.0, Advanced Server, Linux Server 2.0, and LiveCall allows remote attackers to overwrite arbitrary files via ".." sequences in filenames contained in (1) ACE, (2)…
Does this matter?
Lower severity and a low EPSS score (3.49%). Track it; it rarely justifies an emergency change on its own.
Description
Directory traversal vulnerability in HAURI Anti-Virus products including ViRobot Expert 4.0, Advanced Server, Linux Server 2.0, and LiveCall allows remote attackers to overwrite arbitrary files via ".." sequences in filenames contained in (1) ACE, (2) ARJ, (3) CAB, (4) LZH, (5) RAR, (6) TAR and (7) ZIP files.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N
- EPSS
- 3.49% probability · 88th percentile
- CISA KEV
- Not listed
- Affected
- hauri/livecall · hauri/virobot advanced server · hauri/virobot expert · hauri/virobot linux server
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/15846Patch, Vendor Advisory
- http://secunia.com/secunia_research/2005-24/advisoryPatch, Vendor Advisory
- http://securitytracker.com/id?1014740Patch, Vendor Advisory
- http://www.globalhauri.com/html/download/down_unixpatch.htmlPatch
- http://www.securityfocus.com/bid/14606
- http://secunia.com/advisories/15846Patch, Vendor Advisory
- http://secunia.com/secunia_research/2005-24/advisoryPatch, Vendor Advisory
- http://securitytracker.com/id?1014740Patch, Vendor Advisory
- http://www.globalhauri.com/html/download/down_unixpatch.htmlPatch
- http://www.securityfocus.com/bid/14606
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.