Vulnerability Details CVE-2005-2619
Directory traversal vulnerability in kvarcve.dll in Autonomy (formerly Verity) KeyView SDK before 9.2.0, as used in Lotus Notes 6.5.4 and 7.0, allows remote attackers to delete arbitrary files via a (1) ZIP, (2) UUE or (3) TAR archive that contains a .. (dot dot) in the filename, which is not properly handled when generating a preview.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.01
EPSS Ranking 75.5%
CVSS Severity
CVSS v2 Score 9.3
Products affected by CVE-2005-2619
-
cpe:2.3:a:autonomy:keyview_export_sdk:-
-
cpe:2.3:a:autonomy:keyview_filter_sdk:-
-
cpe:2.3:a:autonomy:keyview_viewer_sdk:-
-
cpe:2.3:a:ibm:lotus_notes:6.0.1
-
cpe:2.3:a:ibm:lotus_notes:6.0.2
-
cpe:2.3:a:ibm:lotus_notes:6.0.3
-
cpe:2.3:a:ibm:lotus_notes:6.0.4
-
cpe:2.3:a:ibm:lotus_notes:6.0.5
-
cpe:2.3:a:ibm:lotus_notes:6.5
-
cpe:2.3:a:ibm:lotus_notes:6.5.1
-
cpe:2.3:a:ibm:lotus_notes:6.5.2
-
cpe:2.3:a:ibm:lotus_notes:6.5.3
-
cpe:2.3:a:ibm:lotus_notes:6.5.4
-
cpe:2.3:a:ibm:lotus_notes:7.0