| Package | Affected versions | Patched versions |
|---|---|---|
| lotus notes | = 6.0.1= 6.0.2= 6.0.3= 6.0.4= 6.0.5= 6.5= 6.5.1= 6.5.2= 6.5.3= 6.5.4= 7.0 |
Directory traversal vulnerability in kvarcve.dll in Autonomy (formerly Verity) KeyView SDK before 9.2.0, as used in Lotus Notes 6.5.4 and 7.0, allows remote attackers to delete arbitrary files via a (1) ZIP, (2) UUE or (3) TAR archive that contains a .. (dot dot) in the filename, which is not properly handled when generating a preview.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free