CVE:CVE-2005-2670
CNNVD:CNNVD-200508-238
Directory traversal vulnerability in HAURI Anti-Virus products including ViRobot Expert 4.0， Advanced Server， Linux Server 2.0， and LiveCall allows remote attackers to overwrite arbitrary files via ".." sequences in filenames contained in (1) ACE， (2) ARJ， (3) CAB， (4) LZH， (5) RAR， (6) TAR and (7) ZIP files. HAURI Anti-Virus产品，包括 ViRobot Expert 4.0、Advanced Server、Linux Server 2.0和LiveCall，存在目录遍历漏洞。这使得远程攻击者可以借助于包含在(1) ACE、(2)ARJ、(3)CAB、(4)LZH、(5)RAR、(6) TAR和 (7)ZIP文件中的文件名中的".."序列重写任意文件。
solution:Upgrade hauri livecall to a higher version than *; Upgrade hauri virobot_advanced_server to a higher version than *; Upgrade hauri virobot_expert to a higher version than 4.0,and avoid the version 4.0; Upgrade hauri virobot_linux_server to a higher version than 2.0,and avoid the version 2.0