CVE-2005-2720

Stack-based buffer overflow in the ACE archive decompression library (vrAZace.dll) in HAURI Anti-Virus products including ViRobot Expert 4.0, Advanced Server, Linux Server 2.0, and LiveCall, when compressed file scanning is enabled, allows remote attackers to execute arbitrary code via an ACE archive that contains a file with a long filename.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://secunia.com/secunia_research/2005-33/advisory/	Patch Vendor Advisory
http://www.securityfocus.com/bid/14647	Patch
http://secunia.com/advisories/16488/	Patch Vendor Advisory
http://marc.info/?l=bugtraq&m=112490854126619&w=2
https://exchange.xforce.ibmcloud.com/vulnerabilities/22005

Advertisement

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:hauri:virobot_advanced_server::::::::
	cpe:2.3:a:hauri:virobot_expert:4.0:::::::*
	cpe:2.3:a:hauri:virobot_linux_server:2.0:::::::*
	cpe:2.3:a:hauri:livecall::::::::

Information

Published : 2005-08-30 04:45

Updated : 2017-07-10 18:32

NVD link : CVE-2005-2720

Mitre link : CVE-2005-2720

JSON object : View

CWE

NVD-CWE-Other

Advertisement

Products Affected

hauri

virobot_advanced_server
livecall
virobot_expert
virobot_linux_server

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://secunia.com/secunia_research/2005-33/advisory/", "name": "http://secunia.com/secunia_research/2005-33/advisory/", "tags": ["Patch", "Vendor Advisory"], "refsource": "MISC"}, {"url": "http://www.securityfocus.com/bid/14647", "name": "14647", "tags": ["Patch"], "refsource": "BID"}, {"url": "http://secunia.com/advisories/16488/", "name": "16488", "tags": ["Patch", "Vendor Advisory"], "refsource": "SECUNIA"}, {"url": "http://marc.info/?l=bugtraq&m=112490854126619&w=2", "name": "20050824 Secunia Research: HAURI Anti-Virus ACE Archive Handling Buffer", "tags": [], "refsource": "BUGTRAQ"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/22005", "name": "hauri-ace-vrazace-bo(22005)", "tags": [], "refsource": "XF"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Stack-based buffer overflow in the ACE archive decompression library (vrAZace.dll) in HAURI Anti-Virus products including ViRobot Expert 4.0, Advanced Server, Linux Server 2.0, and LiveCall, when compressed file scanning is enabled, allows remote attackers to execute arbitrary code via an ACE archive that contains a file with a long filename."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2005-2720", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "severity": "HIGH", "impactScore": 6.4, "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": true, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2005-08-30T11:45Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:hauri:virobot_advanced_server:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:hauri:virobot_expert:4.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:hauri:virobot_linux_server:2.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:hauri:livecall:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2017-07-11T01:32Z"}