Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2005-3030

Overview

Vulnerability Score 5.0 5.0
CVE Id CVE-2005-3030
Last Modified 05 Sep 2008 04:53:16
Published 21 Sep 2005 06:03:00
Confidentiality Impact NONE NONE
Integrity Impact PARTIAL PARTIAL
Availability Impact NONE NONE
Access Vector NETWORK
Access Complexity LOW
Authentication NONE

CVE-2005-3030

Summary

Directory traversal vulnerability in the archive decompression library in AhnLab V3Pro 2004 build 6.0.0.383, V3 VirusBlock 2005 build 6.0.0.383, and V3Net for Windows Server 6.0 build 6.0.0.383 allows remote attackers to write arbitrary files via a .. (dot dot) in the filename in a compressed archive.

Vulnerable Systems

Application

  • Ahnlab V3 Virusblock 2005 6.0.0.383

  • Ahnlab V3net 6.0.0.383

  • Ahnlab V3pro 2004 6.0.0.383


References

BID - 14848

MISC - http://secunia.com/secunia_research/2005-17/advisory/

SECUNIA - 15674

BUGTRAQ - 20050915 Secunia Research: Ahnlab V3 Antivirus Multiple Vulnerabilities

CONFIRM - http://info.ahnlab.com/english/advisory/01.html


Last Updated: 27 May 2016 10:40:43