CVE-2005-2670

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Directory traversal vulnerability in HAURI Anti-Virus products including ViRobot Expert 4.0, Advanced Server, Linux Server 2.0, and LiveCall allows remote attackers to overwrite arbitrary files via ".." sequences in filenames contained in (1) ACE, (2) ARJ, (3) CAB, (4) LZH, (5) RAR, (6) TAR and (7) ZIP files.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:P/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/15846Patch, Vendor Advisory
http://secunia.com/secunia_research/2005-24/advisoryPatch, Vendor Advisory
http://securitytracker.com/id?1014740Patch, Vendor Advisory
http://www.globalhauri.com/html/download/down_unixpatch.htmlPatch
http://www.securityfocus.com/bid/14606
http://secunia.com/advisories/15846Patch, Vendor Advisory
http://secunia.com/secunia_research/2005-24/advisoryPatch, Vendor Advisory
http://securitytracker.com/id?1014740Patch, Vendor Advisory
http://www.globalhauri.com/html/download/down_unixpatch.htmlPatch
http://www.securityfocus.com/bid/14606

Timeline

Published: Aug 23, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-26722.1pwmconfig in LM_sensors before 2.9.1 creates temporary files insecurely, which allows local users to overwrite arbitrary files via a symlink CVE-2005-26737.5SQL injection vulnerability in modcp.php in WoltLab Burning Board 2.2.2 and 2.3.3 allows remote authenticated attackers to execute arbitrary CVE-2005-26744.3Note: the vendor has disputed this issue. Multiple cross-site scripting (XSS) vulnerabilities in Land Down Under (LDU) 800 allow remote atta CVE-2005-26757.5Note: the vendor has disputed this issue. Multiple SQL injection vulnerabilities in Land Down Under (LDU) 800 allow remote attackers to exec CVE-2005-26764.3Cross-site scripting (XSS) vulnerability in displayimage.php in Coppermine Photo Gallery before 1.3.4 allows remote attackers to inject arbi CVE-2005-26775.0ACNews stores the database in a file under the web document root with a db.inc extension and insufficient access control, which allows remot CVE-2005-26785.0Microsoft IIS 5.1 and 6 allows remote attackers to spoof the SERVER_NAME variable to bypass security checks and conduct various attacks via CVE-2005-267910.0Buffer overflow in Sysinternals Process Explorer 9.23, and other versions before 9.25, allows local users to execute arbitrary code via a lo CVE-2005-26805.0Unspecified vulnerability in BEA WebLogic Portal 8.1 through SP4, when using entitlements, allows remote attackers to bypass access restrict CVE-2005-26817.2Unspecified vulnerability in the command line processing (CLI) logic in Cisco Intrusion Prevention System 5.0(1) and 5.0(2) allows local use CVE-2005-26827.5aspell_setup.php in the SpellChecker plugin in DTLink AreaEdit before 0.4.3 allows remote attackers to execute arbitrary commands via shell CVE-2005-26837.5Multiple SQL injection vulnerabilities in PHPKit 1.6.1 allow remote attackers to execute arbitrary SQL commands via the (1) letter parameter