CVE-2005-2619

Directory traversal vulnerability in kvarcve.dll in Autonomy (formerly Verity) KeyView SDK before 9.2.0, as used in Lotus Notes 6.5.4 and 7.0, allows remote attackers to delete arbitrary files via a (1) ZIP, (2) UUE or (3) TAR archive that contains a .. (dot dot) in the filename, which is not properly handled when generating a preview.

• CWE-22

• http://secunia.com/advisories/16100Patch, Vendor Advisory
• http://secunia.com/advisories/16280Patch, Vendor Advisory
• http://secunia.com/secunia_research/2005-30/advisory/Vendor Advisory
• http://secunia.com/secunia_research/2005-66/advisory/Vendor Advisory
• http://securitytracker.com/id?1015657Patch
• http://www-1.ibm.com/support/docview.wss?rs=475&uid=swg21229918Patch
• http://www.osvdb.org/23066Patch
• http://www.securityfocus.com/archive/1/424717/100/0/threaded
• http://www.securityfocus.com/bid/16576
• http://www.vupen.com/english/advisories/2006/0500
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24637
• http://secunia.com/advisories/16100Patch, Vendor Advisory
• http://secunia.com/advisories/16280Patch, Vendor Advisory
• http://secunia.com/secunia_research/2005-30/advisory/Vendor Advisory
• http://secunia.com/secunia_research/2005-66/advisory/Vendor Advisory
• http://securitytracker.com/id?1015657Patch
• http://www-1.ibm.com/support/docview.wss?rs=475&uid=swg21229918Patch
• http://www.osvdb.org/23066Patch
• http://www.securityfocus.com/archive/1/424717/100/0/threaded
• http://www.securityfocus.com/bid/16576
• http://www.vupen.com/english/advisories/2006/0500
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24637

Published

Dec 31, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-2613Unknown vulnerability in CPAINT Ajax Toolkit before 1.3-SP a…
• CVE-2005-2614Discuz! 4.0 rc4 does not properly restrict types of files th…
• CVE-2005-2615Unknown vulnerability in session.php in EQdkp before 1.3.0 h…
• CVE-2005-2616Multiple PHP file include vulnerabilities in ezUpload 2.2 al…
• CVE-2005-2617The syscall32_setup_pages function in syscall32.c for Linux …
• CVE-2005-2618Multiple stack-based buffer overflows in Autonomy (formerly …
• CVE-2005-2620grpWise.exe for Novell GroupWise client 5.5 through 6.5.2 st…
• CVE-2005-2621index.php in ECW-Shop 6.0.2 allows remote attackers to obtai…
• CVE-2005-2622Cross-site scripting (XSS) vulnerability in index.php in ECW…
• CVE-2005-2623ECW-Shop 6.0.2 allows remote attackers to reduce the total c…
• CVE-2005-2624Eval injection vulnerability in CPAINT 1.3-SP allows remote …
• CVE-2005-2625Incomplete blacklist vulnerability in the checkBlacklist fun…