deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2005-2120
Published: 2005-10-13
Description: Stack-based buffer overflow in the Plug and Play (PnP) service (UMPNPMGR.DLL) in Microsoft Windows 2000 SP4, and XP SP1 and SP2, allows remote or local authenticated attackers to execute arbitrary code via a large number of "\" (backslash) characters in a registry key name, which triggers the overflow in a wsprintfW function call.
CVSS Score: 6.5 (MEDIUM)
References: http://secunia.com/advisories/17166; http://secunia.com/advisories/17172; http://secunia.com/advisories/17223
CVE: CVE-2005-2963
Published: 2005-10-13
Description: The mod_auth_shadow module 1.0 through 1.5 and 2.0 for Apache with AuthShadow enabled uses shadow authentication for all locations that use the require group directive, even when other authentication mechanisms are specified, which might allow remote authenticated users to bypass security restrictions.
CVSS Score: 7.5 (HIGH)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=323789; http://frontal1.mandriva.com/security/advisories?name=MDKSA-2005:200; http://secunia.com/advisories/17060/
CVE: CVE-2005-2933
Published: 2005-10-13
Description: Buffer overflow in the mail_valid_net_parse_work function in mail.c for Washington's IMAP Server (UW-IMAP) before imap-2004g allows remote attackers to execute arbitrary code via a mailbox name containing a single double-quote (") character without a closing quote, which causes bytes after the double-quote to be copied into a buffer indefinitely.
CVSS Score: 7.5 (HIGH)
References: ftp://patches.sgi.com/support/free/security/advisories/20051201-01-U; ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc; http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0081.html
CVE: CVE-2005-2943
Published: 2005-10-13
Description: Stack-based buffer overflow in sendmail in XMail before 1.22 allows remote attackers to execute arbitrary code via a long -t command line option.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/17194; http://secunia.com/advisories/17637; http://secunia.com/advisories/18052
CVE: CVE-2005-2992
Published: 2005-10-13
Description: arc 5.21j and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files, a different type of vulnerability than CVE-2005-2945.
CVSS Score: 2.1 (LOW)
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0535.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4383&w=2; http://secunia.com/advisories/16805
CVE: CVE-2005-3185
Published: 2005-10-13
Description: Stack-based buffer overflow in the ntlm_output function in http-ntlm.c for (1) wget 1.10, (2) curl 7.13.2, and (3) libcurl 7.13.2, and other products that use libcurl, when NTLM authentication is enabled, allows remote servers to execute arbitrary code via a long NTLM username.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.10/SCOSA-2006.10.txt; http://docs.info.apple.com/article.html?artnum=302847; http://lists.trustix.org/pipermail/tsl-announce/2005-October/000354.html
CVE: CVE-2005-3190
Published: 2005-10-13
Description: Buffer overflow in Computer Associates (CA) iGateway 3.0 and 4.0 before 4.0.050623, when running in debug mode, allows remote attackers to execute arbitrary code via HTTP GET requests.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0349.html; http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0418.html; http://secunia.com/advisories/17085
CVE: CVE-2005-2661
Published: 2005-10-14
Description: Format string vulnerability in the ParseBannerAndCapability function in main.c for up-imapproxy 1.2.3 and 1.2.4 allows remote IMAP servers to execute arbitrary code via format string specifiers in a banner or capability line.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/17100/; http://secunia.com/advisories/17120; http://secunia.com/advisories/19113
CVE: CVE-2005-2967
Published: 2005-10-14
Description: Format string vulnerability in input_cdda.c in xine-lib 1-beta through 1-beta 3, 1-rc, 1.0 through 1.0.2, and 1.1.1 allows remote servers to execute arbitrary code via format string specifiers in metadata in CDDB server responses when the victim plays a CD.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0196.html; http://secunia.com/advisories/17097; http://secunia.com/advisories/17099/
CVE: CVE-2005-3194
Published: 2005-10-14
Description: Multiple buffer overflows in ALZip 6.12 (Korean), 6.1 (International), and 5.52 (English) allow remote attackers to execute arbitrary code via a long filename in a compressed (1) ALZ, (2) ARJ, (3) ZIP, (4) UUE, or (5) XXE archive.
CVSS Score: 5.1 (MEDIUM)
References: http://secunia.com/advisories/16847/; http://secunia.com/secunia_research/2005-49/advisory/; http://securitytracker.com/id?1015003
CVE: CVE-2005-3195
Published: 2005-10-14
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-3178.  Reason: this candidate is a duplicate of CVE-2005-3178; the duplicate arose from a pre-candidate that was not deleted during the editing phase. Notes: All CVE users should reference CVE-2005-3178 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2005-3196
Published: 2005-10-14
Description: Planet Technology Corp FGSW2402RS switch with firmware 1.2 has a default password, which allows attackers with physical access to the device's serial port to gain privileges.
CVSS Score: 4.6 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0302&w=2; http://securityreason.com/securityalert/53; http://www.securityfocus.com/bid/15014
CVE: CVE-2005-3197
Published: 2005-10-14
Description: Stack-based buffer overflow in PWIWrapper.dll for Webroot Desktop Firewall before 1.3.0build52 allows local users to execute arbitrary code as SYSTEM by sending a crafted DeviceIoControl command, then removing an allowed program from the firewall list.
CVSS Score: 7.2 (HIGH)
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0129.html; http://secunia.com/advisories/15745/; http://secunia.com/secunia_research/2005-10/advisory/
CVE: CVE-2005-3198
Published: 2005-10-14
Description: Webroot Desktop Firewall before 1.3.0build52 allows local users to disable the firewall, even when password protection is enabled, via certain DeviceIoControl commands.
CVSS Score: 4.6 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0129.html; http://secunia.com/advisories/15745/; http://secunia.com/secunia_research/2005-10/advisory/
CVE: CVE-2005-3199
Published: 2005-10-14
Description: Multiple SQL injection vulnerabilities in aradmin.asp for aspReady FAQ allow remote attackers to execute arbitrary SQL commands, possibly via the (1) txtLogin and (2) txtPassword parameters.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8315&w=2; http://secunia.com/advisories/17091/; http://securityreason.com/securityalert/52
CVE: CVE-2005-3200
Published: 2005-10-14
Description: Multiple cross-site scripting (XSS) vulnerabilities in Utopia News Pro (UNP) 1.1.3 and 1.1.4 allow remote attackers to inject arbitrary web script or HTML via (1) the sitetitle parameter in header.php and (2) the version and (3) query_count parameters in footer.php.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9874&w=2; http://rgod.altervista.org/utopia113.html; http://secunia.com/advisories/17115/
CVE: CVE-2005-3201
Published: 2005-10-14
Description: SQL injection vulnerability in news.php for Utopia News Pro (UNP) 1.1.3, when magic_quotes_gpc is disabled and register_globals is enabled, allows remote attackers to execute arbitrary SQL via the newsid parameter.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9874&w=2; http://rgod.altervista.org/utopia113.html; http://secunia.com/advisories/17115/
CVE: CVE-2005-3202
Published: 2005-10-14
Description: Multiple cross-site scripting (XSS) vulnerabilities in Oracle HTML DB (HTMLDB) 1.3 through 1.3.6 allow remote attackers to inject arbitrary web script or HTML, and subsequently execute SQL statements via the (1) p or (2) p_t02 parameters.
CVSS Score: 6.8 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0173.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8456&w=2; http://secunia.com/advisories/14935/
CVE: CVE-2005-3203
Published: 2005-10-14
Description: The manual installation of Oracle HTML DB (HTMLDB) 1.3 through 1.3.6 stores the SYS password in install.lst in plaintext, which allows local users to gain privileges.
CVSS Score: 4.6 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0174.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7345&w=2; http://secunia.com/advisories/14935/
CVE: CVE-2005-3204
Published: 2005-10-14
Description: Cross-site scripting (XSS) vulnerability in Oracle XML DB 9iR2 allows remote attackers to inject arbitrary web script or HTML via the query string in an HTTP request.
CVSS Score: 4.3 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0177.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2542&w=2; http://secunia.com/advisories/15991/
CVE: CVE-2005-3205
Published: 2005-10-14
Description: Cross-site scripting (XSS) vulnerability in iSQL*Plus (iSQLPlus) in Oracle9i Database Server Release 2 9.0.2.4 allows remote attackers to inject arbitrary web script or HTML via script in the "set markup HTML TABLE" command, which is executed when the user selects a table.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0172.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4437&w=2; http://secunia.com/advisories/15991/
CVE: CVE-2005-3206
Published: 2005-10-14
Description: iSQL*Plus (isqlplus) for Oracle9i Database Server Release 2 9.0.2.4 allows remote attackers to cause a denial of service (TNS listener stop) via an HTTP request with an sid parameter that contains a STOP command.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0176.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7719&w=2; http://secunia.com/advisories/15991/
CVE: CVE-2005-3207
Published: 2005-10-14
Description: The forms servlet (f90servlet) in Oracle Forms 4.5.10.22 allows remote attackers to cause a denial of service (TNS listener stop) via a userid parameter that contains a STOP command.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0175.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0399&w=2; http://secunia.com/advisories/15991/
CVE: CVE-2005-3208
Published: 2005-10-14
Description: Multiple SQL injection vulnerabilities in (1) aeNovo, (2) aeNovoShop and (3) aeNovoWYSI allow remote attackers to execute arbitrary SQL code via (a) the password parameter in control.asp, and (b) the strSQL parameter in search.asp, which can enable XSS attacks in resulting error messages.
CVSS Score: 6.8 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2359&w=2; http://secunia.com/advisories/17117/; http://www.kapda.ir/advisory-78.html
CVE: CVE-2005-3209
Published: 2005-10-14
Description: Aenovo products (1) aeNovo, (2) aeNovoShop, and (3) aeNovoWYSI store password information in plaintext in the (a) control, (b) content, and (c) page tables, which allows attackers with database access to obtain those passwords and gain privileges.
CVSS Score: 4.6 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2359&w=2; http://secunia.com/advisories/17117/; http://www.kapda.ir/advisory-78.html
CVE: CVE-2005-3210
Published: 2005-10-14
Description: Multiple interpretation error in unspecified versions of Kaspersky Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper.
CVSS Score: 5.1 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9750&w=2; http://shadock.net/secubox/AVCraftedArchive.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9750&w=2
CVE: CVE-2005-3211
Published: 2005-10-14
Description: Multiple interpretation error in unspecified versions of BitDefender Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper.
CVSS Score: 5.1 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9750&w=2; http://shadock.net/secubox/AVCraftedArchive.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9750&w=2
CVE: CVE-2005-3212
Published: 2005-10-14
Description: Multiple interpretation error in unspecified versions of NOD32 Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper.
CVSS Score: 5.1 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9750&w=2; http://shadock.net/secubox/AVCraftedArchive.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9750&w=2
CVE: CVE-2005-3213
Published: 2005-10-14
Description: Multiple interpretation error in unspecified versions of F-Prot Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper.
CVSS Score: 5.1 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9750&w=2; http://shadock.net/secubox/AVCraftedArchive.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9750&w=2
CVE: CVE-2005-3214
Published: 2005-10-14
Description: Multiple interpretation error in unspecified versions of Avast Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper.
CVSS Score: 5.1 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9750&w=2; http://shadock.net/secubox/AVCraftedArchive.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9750&w=2
CVE: CVE-2005-3215
Published: 2005-10-14
Description: Multiple interpretation error in unspecified versions of McAfee Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper.
CVSS Score: 5.1 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9750&w=2; http://shadock.net/secubox/AVCraftedArchive.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9750&w=2
CVE: CVE-2005-3216
Published: 2005-10-14
Description: Multiple interpretation error in unspecified versions of Sophos Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper.
CVSS Score: 5.1 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9750&w=2; http://shadock.net/secubox/AVCraftedArchive.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9750&w=2
CVE: CVE-2005-3217
Published: 2005-10-14
Description: Multiple interpretation error in unspecified versions of Symantec Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper.
CVSS Score: 5.1 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9750&w=2; http://shadock.net/secubox/AVCraftedArchive.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9750&w=2
CVE: CVE-2005-3218
Published: 2005-10-14
Description: Multiple interpretation error in unspecified versions of Dr.Web Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper.
CVSS Score: 5.1 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9750&w=2; http://shadock.net/secubox/AVCraftedArchive.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9750&w=2
CVE: CVE-2005-3219
Published: 2005-10-14
Description: Multiple interpretation error in unspecified versions of Avira Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper.
CVSS Score: 5.1 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9750&w=2; http://shadock.net/secubox/AVCraftedArchive.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9750&w=2
CVE: CVE-2005-3220
Published: 2005-10-14
Description: Multiple interpretation error in unspecified versions of Norman Virus Control Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper.
CVSS Score: 5.1 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9750&w=2; http://shadock.net/secubox/AVCraftedArchive.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9750&w=2
CVE: CVE-2005-3221
Published: 2005-10-14
Description: Multiple interpretation error in unspecified versions of Fortinet Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper.
CVSS Score: 5.1 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9750&w=2; http://shadock.net/secubox/AVCraftedArchive.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9750&w=2
CVE: CVE-2005-3222
Published: 2005-10-14
Description: Multiple interpretation error in unspecified versions of VBA32 Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper.
CVSS Score: 5.1 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9750&w=2; http://shadock.net/secubox/AVCraftedArchive.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9750&w=2
CVE: CVE-2005-3223
Published: 2005-10-14
Description: Multiple interpretation error in unspecified versions of Rising Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper.
CVSS Score: 5.1 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9750&w=2; http://shadock.net/secubox/AVCraftedArchive.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9750&w=2
CVE: CVE-2005-3224
Published: 2005-10-14
Description: Multiple interpretation error in unspecified versions of AntiVir Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper.
CVSS Score: 5.1 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9750&w=2; http://shadock.net/secubox/AVCraftedArchive.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9750&w=2
CVE: CVE-2005-3225
Published: 2005-10-14
Description: Multiple interpretation error in unspecified versions of (1) eTrust-Iris and (2) eTrust-Vet Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper.
CVSS Score: 5.1 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9750&w=2; http://shadock.net/secubox/AVCraftedArchive.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9750&w=2
CVE: CVE-2005-3226
Published: 2005-10-14
Description: Multiple interpretation error in unspecified versions of ArcaVir Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper.
CVSS Score: 5.1 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9750&w=2; http://shadock.net/secubox/AVCraftedArchive.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9750&w=2
CVE: CVE-2005-3227
Published: 2005-10-14
Description: Multiple interpretation error in unspecified versions of UNA Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper.
CVSS Score: 5.1 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9750&w=2; http://shadock.net/secubox/AVCraftedArchive.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9750&w=2
CVE: CVE-2005-3228
Published: 2005-10-14
Description: Multiple interpretation error in unspecified versions of Ikarus AntiVirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper.
CVSS Score: 5.1 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9750&w=2; http://shadock.net/secubox/AVCraftedArchive.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9750&w=2
CVE: CVE-2005-3229
Published: 2005-10-14
Description: Multiple interpretation error in unspecified versions of ClamAV Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper.
CVSS Score: 5.1 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9750&w=2; http://shadock.net/secubox/AVCraftedArchive.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9750&w=2