Vulnerability in Ahnlab V3net
CVE-2005-3030
Directory traversal vulnerability in the archive decompression library in AhnLab V3Pro 2004 build 6.0.0.383, V3 VirusBlock 2005 build 6.0.0.383, and V3Net for Windows Server 6.0 build 6.0.0.383 allows remote attackers to write arbitrary files via a .. (dot dot) in the filename in a compressed archive.
Published · last modified .
CVSS v2 metric
CVSS v2 base score 5.0 (Medium). Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.035 (88.7th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 89th percentile — 88.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.035 · newest: 0.035 · change: 0.000
Affected products
- Ahnlab V3net — versions 6.0.0.383
- Ahnlab V3pro 2004 — versions 6.0.0.383
- Ahnlab V3 Virusblock 2005 — versions 6.0.0.383
References
- secunia.com/secunia_research/2005-17/advisory/ (Patch, Vendor Advisory)
- marc.info/ (mailing-list)
- www.securityfocus.com/bid/14848 (Patch, vdb-entry)
- info.ahnlab.com/english/advisory/01.html (Patch, Vendor Advisory)
- secunia.com/advisories/15674/ (Patch, Vendor Advisory, third-party-advisory)