Ahnlab V3 Antivirus ACE Archive Handling Directory Traversal Vulnerability
BID:14848
Info
Ahnlab V3 Antivirus ACE Archive Handling Directory Traversal Vulnerability
| Bugtraq ID: | 14848 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 15 2005 12:00AM |
| Updated: | Sep 15 2005 12:00AM |
| Credit: | Discovery is credited to Tan Chew Keong, Secunia Research. |
| Vulnerable: |
Ahnlab V3Pro 2004 6.0 .0.383 Ahnlab V3Net for Windows Server 6.0 6.0 .0.383 Ahnlab V3 VirusBlock 2005 6.0 .0.383 |
| Not Vulnerable: | |
Discussion
Ahnlab V3 Antivirus ACE Archive Handling Directory Traversal Vulnerability
Ahnlab V3 Antivirus products are affected by a remote directory traversal vulnerability facilitating arbitrary file uploads.
Malicious files may be placed in arbitrary locations on the filesystem, which can lead to various attacks including arbitrary code execution.
AhnLab V3Pro 2004 Build 6.0.0.383, AhnLab V3 VirusBlock 2005 Build 6.0.0.383, and AhnLab V3Net for Windows Server 6.0 Build 6.0.0.383 are reported to be vulnerable. Other versions may be affected as well.
Ahnlab V3 Antivirus products are affected by a remote directory traversal vulnerability facilitating arbitrary file uploads.
Malicious files may be placed in arbitrary locations on the filesystem, which can lead to various attacks including arbitrary code execution.
AhnLab V3Pro 2004 Build 6.0.0.383, AhnLab V3 VirusBlock 2005 Build 6.0.0.383, and AhnLab V3Net for Windows Server 6.0 Build 6.0.0.383 are reported to be vulnerable. Other versions may be affected as well.
Exploit / POC
Ahnlab V3 Antivirus ACE Archive Handling Directory Traversal Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Ahnlab V3 Antivirus ACE Archive Handling Directory Traversal Vulnerability
Solution:
The vendor has released Build version 6.0.0.457 to address this issue. Users are advised to upgrade through the online update functionality of the application.
Solution:
The vendor has released Build version 6.0.0.457 to address this issue. Users are advised to upgrade through the online update functionality of the application.
References
Ahnlab V3 Antivirus ACE Archive Handling Directory Traversal Vulnerability
References:
References:
- Ahnlab Home Page (Ahnlab)
- Secunia Research: Ahnlab V3 Antivirus Multiple Vulnerabilities (Secunia Research