PT-2005-3864 · Ace+1 · Ace Archive+3

Published 2005-09-21 · Updated 2016-10-18 · CVE-2005-3029

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions AhnLab V3Pro version 2004 build 6.0.0.383 AhnLab V3 VirusBlock version 2005 build 6.0.0.383 AhnLab V3Net for Windows Server version 6.0 build 6.0.0.383

Description The issue is a stack-based buffer overflow that allows remote attackers to execute arbitrary code. This is achieved by using a long filename in an ACE archive.

Recommendations For AhnLab V3Pro version 2004 build 6.0.0.383, update to a version that fixes this issue. For AhnLab V3 VirusBlock version 2005 build 6.0.0.383, update to a version that fixes this issue. For AhnLab V3Net for Windows Server version 6.0 build 6.0.0.383, update to a version that fixes this issue.

Fix

Related Identifiers

CVE-2005-3029

Affected Products

Ace Archive

Ahnlab V3 Virusblock

Ahnlab V3Net For Windows Server

Ahnlab V3Pro

References · 6

• http://secunia.com/secunia_research/2005-17/advisory · Vendor Advisory
• http://securityfocus.com/bid/14844 · Patch
• http://info.ahnlab.com/english/advisory/01.html · Vendor Advisory
• http://secunia.com/advisories/15674 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-3029 · Security Note
• http://marc.info/?l=bugtraq&m=112680062609377&w=2 · Note