Back to Database
Status published
Medium
CVE-2005-2670
Directory traversal vulnerability in HAURI Anti-Virus products including ViRobot Expert...
Vulnerability Description
Directory traversal vulnerability in HAURI Anti-Virus products including ViRobot Expert 4.0, Advanced Server, Linux Server 2.0, and LiveCall allows remote attackers to overwrite arbitrary files via ".." sequences in filenames contained in (1) ACE, (2) ARJ, (3) CAB, (4) LZH, (5) RAR, (6) TAR and (7) ZIP files.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2005-2670
Credits & Attribution
No credits recorded in the NVD database.
References
More from hauri
View All →CVE-2009-4476
Stack-based buffer overflow in HAURI ViRobot Desktop 5.5 before 2009-09-28.00...
Critical
10
CVE-2008-5547
HAURI ViRobot 2008.12.4.1499 and possibly 2008.9.12.1375, when Internet Explorer 6...
Critical
9.3
CVE-2006-0864
filescan in Global Hauri ViRobot 2.0 20050817 does not verify...
Critical
10
CVE-2005-4786
Buffer overflow in the archive decompression library (vrAZMain.dll 5.8.22.137), as...
Medium
4
CVE-2005-2720
Stack-based buffer overflow in the ACE archive decompression library (vrAZace.dll)...
High
7.5
Affected Vendor
hauri
View all reports →Affected Software
livecall, virobot advanced server, virobot expert, virobot linux server
Vulnerable Versions:
4.0, 2.0
Timeline
Official Publish:
August 23rd, 2005
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.