5

CVE-2005-3030

Directory traversal vulnerability in the archive decompression library in AhnLab V3Pro 2004 build 6.0.0.383, V3 VirusBlock 2005 build 6.0.0.383, and V3Net for Windows Server 6.0 build 6.0.0.383 allows remote attackers to write arbitrary files via a .. (dot dot) in the filename in a compressed archive.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ahnlab ≫ V3 Virusblock 2005 Version 6.0.0.383
Ahnlab ≫ V3net Version 6.0.0.383 Edition win_server
Ahnlab ≫ V3pro 2004 Version 6.0.0.383
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.49% 0.876
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://info.ahnlab.com/english/advisory/01.html
Patch
Vendor Advisory
http://marc.info/?l=bugtraq&m=112680062609377&w=2
http://secunia.com/advisories/15674/
Patch
Vendor Advisory
http://secunia.com/secunia_research/2005-17/advisory/
Patch
Vendor Advisory
http://www.securityfocus.com/bid/14848
Patch