PT-2005-3558 · Hauri · Virobot Expert+3

Published 2005-08-23 · Updated 2008-09-05 · CVE-2005-2670

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions HAURI Anti-Virus products including ViRobot Expert version 4.0 HAURI Anti-Virus products including Advanced Server (affected versions not specified) HAURI Anti-Virus products including Linux Server version 2.0 HAURI Anti-Virus products including LiveCall (affected versions not specified)

Description The issue allows remote attackers to overwrite arbitrary files via ".." sequences in filenames contained in various archive file types, including ACE, ARJ, CAB, LZH, RAR, TAR, and ZIP files.

Recommendations For ViRobot Expert version 4.0, update to a version that includes a fix for the directory traversal issue. For Advanced Server, apply the necessary configuration changes or patches as recommended by the vendor to address the issue. For Linux Server version 2.0, restrict access to archive files until a patch is available. For LiveCall, avoid processing archive files with ".." sequences in filenames until the issue is resolved.

Fix

Related Identifiers

CVE-2005-2670

Affected Products

Advanced Server

Linux-Vserver

Livecall

Virobot Expert

References · 6

• http://globalhauri.com/html/download/down_unixpatch.html · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2005-2670 · Security Note
• http://secunia.com/advisories/15846 · Vendor Advisory
• http://secunia.com/secunia_research/2005-24/advisory · Vendor Advisory
• http://securitytracker.com/id?1014740 · Vendor Advisory
• http://securityfocus.com/bid/14606 · Note