CVE-2005-2385

Vulnerability in avast! antivirus (UNACEV2.DLL) used for ACE archive handling. The issue is a stack-based buffer overflow due to improper boundary checking when scanning ACE files, which can be triggered by a long filename in an ACE archive. This leads to remote code execution with SYSTEM privile...

CVE-2005-2385

Buffer overflow in a third-party compression library UNACEV2.DLL, as used in avast! Antivirus Home/Professional Edition 4.6.665 and Server Edition 4.6.460, allows remote attackers to execute arbitrary code via an ACE archive containing a long filename...

CVE-2005-2385

Buffer overflow in a third-party compression library UNACEV2.DLL, as used in avast! Antivirus Home/Professional Edition 4.6.665 and Server Edition 4.6.460, allows remote attackers to execute arbitrary code via an ACE archive containing a long filename...

CVE-2005-2384

Directory traversal vulnerability in a third-party compression library UNACEV2.DLL, as used in avast! Antivirus Home/Professional Edition 4.6.665 and Server Edition 4.6.460, allows remote attackers to write arbitrary files via an ACE archive containing filenames with 1 .. or 2 absolute pathnames...

CVE-2005-2384

Directory traversal vulnerability in a third-party compression library UNACEV2.DLL, as used in avast! Antivirus Home/Professional Edition 4.6.665 and Server Edition 4.6.460, allows remote attackers to write arbitrary files via an ACE archive containing filenames with 1 .. or 2 absolute pathnames...

Multiple Avast! antivirus ACE archives vulnerabilities

Directory traversal, buffer overflow...

KLA10405 ACE vulnerability in Xpand Rally

A format string vulnerability was found in Xpand Rally. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially defined message. Original advisories - Related products Xpand-Rally CVE list CVE-2005-0729 high Solutio...

KLA10316 ACE vulnerability in Sacred

A buffer overflow was found in Sacred. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via unknown vectors. Original advisories - Related products Sacred CVE list CVE-2005-0906 high Solution Update to latest version Impacts...

KLA10272 ACE vulnerability in NetTerm

A buffer overflow was found in NetTerm. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed command. Original advisories - Related products NetTerm CVE list CVE-2005-1323 high Solution Update to latest...

CVE-2001-1462

CVE-2001-1462 affects RSA SecurID 5.0 WebID as used by ACE/Agent for Windows, Windows NT and Windows 2000. A URL containing null characters can trigger the WebID agent to enter debug mode, potentially exposing sensitive information. The available documents do not specify further impact details, a...

CVE-2001-1462

WebID in RSA Security SecurID 5.0 as used by ACE/Agent for Windows, Windows NT and Windows 2000 allows attackers to cause the WebID agent to enter debug mode via a URL containing null characters, which may allow attackers to obtain sensitive information...

CVE-2001-1461

Directory traversal vulnerability in WebID in RSA Security SecurID 5.0 as used by ACE/Agent for Windows, Windows NT and Windows 2000 allows attackers to access restricted resources via URL-encoded 1 /.. or 2 .. sequences...

CVE-2005-0160

Multiple buffer overflows in unace 1.2b allow attackers to execute arbitrary code via 1 2 overflows in ACE archives, 2 a long command line argument, or 3 certain "Ready for next volume" messages...

CVE-2005-0161

CVE-2005-0161 concerns unace 1.2b, with confirmed issues in multiple advisories. The vulnerability allows directory traversal via ACE archives containing sequences such as "../" or absolute pathnames, potentially enabling overwriting arbitrary files. Some sources also describe buffer overflows du...

CVE-2005-0161

Multiple directory traversal vulnerabilities in unace 1.2b allow attackers to overwrite arbitrary files via an ACE archive containing 1 ../ sequences or 2 absolute pathnames...

CVE-2005-0160

Multiple buffer overflows in unace 1.2b allow attackers to execute arbitrary code via 1 2 overflows in ACE archives, 2 a long command line argument, or 3 certain "Ready for next volume" messages...

CVE-2005-0161

Multiple directory traversal vulnerabilities in unace 1.2b allow attackers to overwrite arbitrary files via an ACE archive containing 1 ../ sequences or 2 absolute pathnames...

[Full-Disclosure] unace-1.2b multiple buffer overflows and directory traversal bugs

I have found multiple security vulnerabilities in unace-1.2b. It is the last free version. The later versions are just binaries for the x86 processor, which is unhelpful if you want to use free software or if your computer has a non-x86 processor. There are two buffer overflows when extracting,...

Winace UnAce 1.x - ACE Archive Directory Traversal

source: https://www.securityfocus.com/bid/12628/info A remotely exploitable client-side directory-traversal vulnerability affects Winace unace. The application fails to properly sanitize file and directory names contained within malicious ACE format archives. An attacker may leverage this issue b...

CVE-2005-0160

Multiple buffer overflows in unace 1.2b allow attackers to execute arbitrary code via 1 2 overflows in ACE archives, 2 a long command line argument, or 3 certain "Ready for next volume" messages...