Lucene search

[email protected]CVE-2005-2670

HistoryAug 23, 2005 - 4:00 a.m.

CVE-2005-2670

2005-08-2304:00:00

[email protected]

web.nvd.nist.gov

vulnerability

directory traversal

hauri

anti-virus

cve

remote attackers

overwrite

arbitrary files

file formats

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

7.3 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

74.7%

JSON

Directory traversal vulnerability in HAURI Anti-Virus products including ViRobot Expert 4.0, Advanced Server, Linux Server 2.0, and LiveCall allows remote attackers to overwrite arbitrary files via “…” sequences in filenames contained in (1) ACE, (2) ARJ, (3) CAB, (4) LZH, (5) RAR, (6) TAR and (7) ZIP files.

Affected configurations

NVD

Node

haurilivecall

haurivirobot_advanced_server

haurivirobot_expertMatch4.0

haurivirobot_linux_serverMatch2.0

CPENameOperatorVersion
hauri:livecallhauri livecalleq*
hauri:virobot_advanced_serverhauri virobot advanced servereq*
hauri:virobot_experthauri virobot experteq4.0
hauri:virobot_linux_serverhauri virobot linux servereq2.0

CPE	Name	Operator	Version
hauri:livecall	hauri livecall	eq	*
hauri:virobot_advanced_server	hauri virobot advanced server	eq	*
hauri:virobot_expert	hauri virobot expert	eq	4.0
hauri:virobot_linux_server	hauri virobot linux server	eq	2.0

References

secunia.com/advisories/15846

secunia.com/secunia_research/2005-24/advisory

securitytracker.com/id?1014740

www.globalhauri.com/html/download/down_unixpatch.html

www.securityfocus.com/bid/14606

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

7.3 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

74.7%

JSON

Related for CVE-2005-2670

cvelist1 nvd1