CVE-2005-2619

Related Files

secunia-LotusTraverse.txt

Posted Feb 13, 2006

Authored by Carsten Eiram, Tan Chew Keong | Site secunia.com

Secunia Research has discovered a vulnerability in Lotus Notes, which can be exploited by malicious people to bypass certain security restrictions. The vulnerability is caused due to directory traversal errors in kvarcve.dll when generating the preview of a compressed file from ZIP, UUE and TAR archives. This can be exploited to delete arbitrary files that are accessible to the Notes user. Affected versions are Lotus Notes 6.5.4 and Lotus Notes 7.0.

tags | advisory, arbitrary, file inclusion

advisories | CVE-2005-2619

SHA-256 | a9bc2a3a0141f79688e6b766ca98f395753401a2d0e8795deb887ac34da40f1f

Download | Favorite | View