Description
Directory traversal vulnerability in kvarcve.dll in Autonomy (formerly Verity) KeyView SDK before 9.2.0, as used in Lotus Notes 6.5.4 and 7.0, allows remote attackers to delete arbitrary files via a (1) ZIP, (2) UUE or (3) TAR archive that contains a .. (dot dot) in the filename, which is not properly handled when generating a preview.
References
- http://www-1.ibm.com/support/docview.wss?rs=475&uid=swg21229918
- ADV-2006-0500 vdb-entry
- 23066 vdb-entry
- 20060210 Secunia Research: Lotus Notes Multiple Archive Handling DirectoryTraversal mailing-list
- 1015657 vdb-entry
- 16576 vdb-entry
- lotus-kvarcve-directory-traversal(24637) vdb-entry
- 16100 third-party-advisory
- http://secunia.com/secunia_research/2005-30/advisory/
- http://secunia.com/secunia_research/2005-66/advisory/
- 16280 third-party-advisory