Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Directory traversal vulnerability in kvarcve.dll in Autonomy (formerly Verity) KeyView SDK before 9.2.0, as used in Lotus Notes 6.5.4 and 7.0, allows remote attackers to delete arbitrary files via a (1) ZIP, (2) UUE or (3) TAR archive that contains a .. (dot dot) in the filename, which is not properly handled when generating a preview.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IBM Lotus Notes文件附件处理多个远程溢出和目录遍历漏洞
Vulnerability Description
Lotus Domino/Notes服务器是一款基于WEB协同工作的应用程序架构,运行在Linux/Unix和Microsoft Windows操作系统平台下。 IBM Lotus Notes中存在多个远程溢出和目录遍历漏洞,具体如下: IBM Lotus Notes的kvarcve.dll在解压ZIP文档创建压缩文件的完整路径名时存在栈溢出漏洞,如果用户在 Notes附件浏览器中解压了带有超长文件名的压缩文件时可能导致执行任意代码。 IBM Lotus Notes的uudrdr.dll在处理带有超长文件
CVSS Information
N/A
Vulnerability Type
N/A