Unscored severity · published Dec 31, 2005
CVE-2005-2619
Directory traversal vulnerability in kvarcve.dll in Autonomy (formerly Verity) KeyView SDK before 9.2.0, as used in Lotus Notes 6.5.4 and 7.0, allows remote attackers to delete…
–
CVSS
3.3%
EPSS
No
On KEV
Description
Directory traversal vulnerability in kvarcve.dll in Autonomy (formerly Verity) KeyView SDK before 9.2.0, as used in Lotus Notes 6.5.4 and 7.0, allows remote attackers to delete arbitrary files via a (1) ZIP, (2) UUE or (3) TAR archive that contains a .. (dot dot) in the filename, which is not properly handled when generating a preview.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.3% · higher than 88% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KE
Keyview Export Sdk · Autonomy
All versions, or not specified · source: NVD
KF
Keyview Filter Sdk · Autonomy
All versions, or not specified · source: NVD
KV
Keyview Viewer Sdk · Autonomy
All versions, or not specified · source: NVD
LN
Lotus Notes · Ibm
6.0.1; 6.0.2; 6.0.3; 6.0.4; 6.0.5; 6.5; +5 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-2619
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-2619
Patch
http://secunia.com/advisories/16100
Patch
http://secunia.com/advisories/16280
Vendor Advisory
http://secunia.com/secunia_research/2005-30/advisory/
Vendor Advisory
http://secunia.com/secunia_research/2005-66/advisory/
Patch
http://securitytracker.com/id?1015657
Patch
http://www-1.ibm.com/support/docview.wss?rs=475&uid=swg21229918
More from Keyview Export Sdk
–
CVE-2010-1525
Integer underflow in the SpreadSheet Lotus 123 reader (wkssr.dll) in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allows remote attackers…
–
CVE-2010-1524
The SpreadSheet Lotus 123 reader (wkssr.dll) in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allows remote attackers to execute arbitrary…
–
CVE-2010-0135
Heap-based buffer overflow in the WordPerfect 5.x reader (wosr.dll), as used in Autonomy KeyView 10.4 and 10.9 and possibly other products, allows remote attackers to execute…
–
CVE-2010-0134
Integer signedness error in rtfsr.dll in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allows remote attackers to execute arbitrary code…
–
CVE-2010-0133
Multiple stack-based buffer overflows in the SpreadSheet Lotus 123 reader (wkssr.dll) in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products,…