CVE-2005-2619

published 2005-12-31

CVE-2005-2619: Directory traversal vulnerability in kvarcve.dll in Autonomy (formerly Verity) KeyView SDK before 9.2.0, as used in Lotus Notes 6.5.4 and 7.0, allows remote…

Priority P4 34 critical 9.3 CVSS 2.0

AV N AC M Au N C C I C A C

Directory traversal vulnerability in kvarcve.dll in Autonomy (formerly Verity) KeyView SDK before 9.2.0, as used in Lotus Notes 6.5.4 and 7.0, allows remote attackers to delete arbitrary files via a (1) ZIP, (2) UUE or (3) TAR archive that contains a .. (dot dot) in the filename, which is not properly handled when generating a preview.

Affected

11 ranges

Vendor	Product	Version range	Fixed in
ibm	lotus_notes	—	—
ibm	lotus_notes	—	—
ibm	lotus_notes	—	—
ibm	lotus_notes	—	—
ibm	lotus_notes	—	—
ibm	lotus_notes	—	—
ibm	lotus_notes	—	—
ibm	lotus_notes	—	—
ibm	lotus_notes	—	—
ibm	lotus_notes	—	—
ibm	lotus_notes	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-22