CVE-2005-2670

Directory traversal vulnerability in HAURI Anti-Virus products including ViRobot Expert 4.0, Advanced Server, Linux Server 2.0, and LiveCall allows remote attackers to overwrite arbitrary files via ".." sequences in filenames contained in (1) ACE, (2) ARJ, (3) CAB, (4) LZH, (5) RAR, (6) TAR and (7) ZIP files.

• http://secunia.com/advisories/15846Patch, Vendor Advisory
• http://secunia.com/secunia_research/2005-24/advisoryPatch, Vendor Advisory
• http://securitytracker.com/id?1014740Patch, Vendor Advisory
• http://www.globalhauri.com/html/download/down_unixpatch.htmlPatch
• http://www.securityfocus.com/bid/14606
• http://secunia.com/advisories/15846Patch, Vendor Advisory
• http://secunia.com/secunia_research/2005-24/advisoryPatch, Vendor Advisory
• http://securitytracker.com/id?1014740Patch, Vendor Advisory
• http://www.globalhauri.com/html/download/down_unixpatch.htmlPatch
• http://www.securityfocus.com/bid/14606

Published

Aug 23, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-2664Whisper 32 1.16, and possibly earlier versions, stores passw…
• CVE-2005-2665Stack-based buffer overflow in expires.c in Elm 2.5 PL5 thro…
• CVE-2005-2666SSH, as implemented in OpenSSH before 4.0 and possibly other…
• CVE-2005-2667Unknown vulnerability in Computer Associates (CA) Message Qu…
• CVE-2005-2668Multiple buffer overflows in Computer Associates (CA) Messag…
• CVE-2005-2669Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, …
• CVE-2005-2671Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2005-2672pwmconfig in LM_sensors before 2.9.1 creates temporary files…
• CVE-2005-2673SQL injection vulnerability in modcp.php in WoltLab Burning …
• CVE-2005-2674Note: the vendor has disputed this issue. Multiple cross-sit…
• CVE-2005-2675Note: the vendor has disputed this issue. Multiple SQL injec…
• CVE-2005-2676Cross-site scripting (XSS) vulnerability in displayimage.php…