• info
• discussion
• exploit
• solution
• references

Ahnlab V3 Antivirus ACE Archive Handling Directory Traversal Vulnerability

Ahnlab V3 Antivirus products are affected by a remote directory traversal vulnerability facilitating arbitrary file uploads.

Malicious files may be placed in arbitrary locations on the filesystem, which can lead to various attacks including arbitrary code execution.

AhnLab V3Pro 2004 Build 6.0.0.383, AhnLab V3 VirusBlock 2005 Build 6.0.0.383, and AhnLab V3Net for Windows Server 6.0 Build 6.0.0.383 are reported to be vulnerable. Other versions may be affected as well.