Vulnerability Details CVE-2005-3030
Directory traversal vulnerability in the archive decompression library in AhnLab V3Pro 2004 build 6.0.0.383, V3 VirusBlock 2005 build 6.0.0.383, and V3Net for Windows Server 6.0 build 6.0.0.383 allows remote attackers to write arbitrary files via a .. (dot dot) in the filename in a compressed archive.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.026
EPSS Ranking 84.8%
CVSS Severity
CVSS v2 Score 5.0
References
- http://info.ahnlab.com/english/advisory/01.html
- http://marc.info/?l=bugtraq&m=112680062609377&w=2
- http://secunia.com/advisories/15674/
- http://secunia.com/secunia_research/2005-17/advisory/
- http://www.securityfocus.com/bid/14848
- http://info.ahnlab.com/english/advisory/01.html
- http://marc.info/?l=bugtraq&m=112680062609377&w=2
- http://secunia.com/advisories/15674/
- http://secunia.com/secunia_research/2005-17/advisory/
- http://www.securityfocus.com/bid/14848
Products affected by CVE-2005-3030
-
cpe:2.3:a:ahnlab:v3_virusblock_2005:6.0.0.383
-
cpe:2.3:a:ahnlab:v3net:6.0.0.383
-
cpe:2.3:a:ahnlab:v3pro_2004:6.0.0.383