CVE-2005-4786

The CVE-2005-4786 issue is a buffer overflow in the ALZ archive decompression in vrAZMain.dll (version 5.8.22.137) used by HAURI antivirus products (ViRobot Expert 4.0, ViRobot Advanced Server, HAURI LiveCall). It can allow user‑assisted attackers to execute arbitrary code by processing an ALZ ar...

CVE-2006-0864

filescan in Global Hauri ViRobot 2.0 20050817 does not verify the Cookie HTTP header, which allows remote attackers to gain administrative privileges via an arbitrary cookie value...

Design/Logic Flaw

filescan in Global Hauri ViRobot 2.0 20050817 does not verify the Cookie HTTP header, which allows remote attackers to gain administrative privileges via an arbitrary cookie value...

CVE-2006-0864

filescan in Global Hauri ViRobot 2.0 20050817 does not verify the Cookie HTTP header, which allows remote attackers to gain administrative privileges via an arbitrary cookie value...

CVE-2006-0864

Affected product: ViRobot Linux Server (filescan component). Vulnerability: Cookie-based authentication bypass due to Cookie header verification failure, enabling an unauthenticated attacker to gain administrative access and potentially delete files or disrupt the service. Impact (as stated): Adm...

Hauri Virobot antivirus privilege esalation

Local user can obtain unrestricted access with suid CGI executable...

[Full-disclosure] [INetCop Security Advisory] Global Hauri Virobot cookie exploit

======================================== INetCop Security Advisory 2006-0x82-028 ======================================== Title: Global Hauri Virobot cookie exploit 0x01. Description Virobot Unix/Linux Server is anti virus program that develop in Global Hauri. Product in Unix of SUN Sparc, HP, IB...

CVE-2005-4786

Buffer overflow in the archive decompression library vrAZMain.dll 5.8.22.137, as used in HAURI anti-virus products including 1 ViRobot Expert 4.0, 2 ViRobot Advanced Server, and 3 HAURI LiveCall, allows user-assisted attackers to execute arbitrary code via an ALZ archive containing a file with a...

[SA16852] HAURI Anti-Virus ALZ Archive Handling Buffer Overflow

TITLE: HAURI Anti-Virus ALZ Archive Handling Buffer Overflow SECUNIA ADVISORY ID: SA16852 VERIFY ADVISORY: http://secunia.com/advisories/16852/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: HAURI LiveCall http://secunia.com/product/5448/ ViRobot Advanced Server...

HAURI ViRobot antivirus buffer overflow

ALZ Archive Handling Buffer Overflow...

CVE-2005-2720

Stack-based buffer overflow in the ACE archive decompression library vrAZace.dll in HAURI Anti-Virus products including ViRobot Expert 4.0, Advanced Server, Linux Server 2.0, and LiveCall, when compressed file scanning is enabled, allows remote attackers to execute arbitrary code via an ACE archi...

[SA16488] HAURI Anti-Virus ACE Archive Handling Buffer Overflow

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

Hauri antiviral products buffer overflow

Buffer overflow on parsing ACE archives...

HAURItraverse.txt

====================================================================== Secunia Research 19/08/2005 - HAURI Anti-Virus Compressed Archive Directory Traversal - ====================================================================== Table of Contents Affected...

CVE-2005-2670

Directory traversal vulnerability in HAURI Anti-Virus products including ViRobot Expert 4.0, Advanced Server, Linux Server 2.0, and LiveCall allows remote attackers to overwrite arbitrary files via ".." sequences in filenames contained in 1 ACE, 2 ARJ, 3 CAB, 4 LZH, 5 RAR, 6 TAR and 7 ZIP files...

CVE-2005-2670

Directory traversal vulnerability in HAURI Anti-Virus products including ViRobot Expert 4.0, Advanced Server, Linux Server 2.0, and LiveCall allows remote attackers to overwrite arbitrary files via ".." sequences in filenames contained in 1 ACE, 2 ARJ, 3 CAB, 4 LZH, 5 RAR, 6 TAR and 7 ZIP files...

CVE-2005-2670

CVE-2005-2670 describes a directory traversal vulnerability in HAURI Anti-Virus products (including ViRobot Expert 4.0, Advanced Server, Linux Server 2.0, and LiveCall). The flaw allows remote attackers to overwrite arbitrary files by exploiting directory traversal sequences ("..") embedded in ar...

[SA15846] HAURI Anti-Virus Compressed Archive Directory Traversal

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

Hauri antivirus directory traversal

Directory traversal during archive antiviral checking...

[Full-disclosure] HAURI live update. Arbitrary remote file download and execute vulnerability

Dear F/D Mailling -----------Cut Cut-------------------------------- Title: HAURI live update. Arbitrary remote file download and execute vulnerability Discoverer: Original discoverer Neo Original exploit improver PARK, GYU TAE [email protected] Advisory No.: NRVA05-03 Critical: High Critic...