CVE-2005-2670

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-08-23 · updated 2026-06-16

Description

Directory traversal vulnerability in HAURI Anti-Virus products including ViRobot Expert 4.0, Advanced Server, Linux Server 2.0, and LiveCall allows remote attackers to overwrite arbitrary files via ".." sequences in filenames contained in (1) ACE, (2) ARJ, (3) CAB, (4) LZH, (5) RAR, (6) TAR and (7) ZIP files.

Affected products

Hauri Livecall: all versions
Hauri Virobot Advanced Server: all versions
Hauri Virobot Expert: 4.0
Hauri Virobot Linux Server: 2.0

References

http://secunia.com/advisories/15846
http://secunia.com/secunia_research/2005-24/advisory
http://securitytracker.com/id?1014740
http://www.globalhauri.com/html/download/down_unixpatch.html
http://www.securityfocus.com/bid/14606
http://secunia.com/advisories/15846
http://secunia.com/secunia_research/2005-24/advisory
http://securitytracker.com/id?1014740
http://www.globalhauri.com/html/download/down_unixpatch.html
http://www.securityfocus.com/bid/14606

Get alerted when CVE-2005-2670 or the next vulnerability affects your stack