Unscored severity · published Aug 18, 2004
CVE-2004-0234
Multiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as used in products such as Barracuda Spam Firewall, allow remote attackers or local…
–
CVSS
10.3%
EPSS
No
On KEV
Description
Multiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as used in products such as Barracuda Spam Firewall, allow remote attackers or local users to execute arbitrary code via long directory or file names in an LHA archive, which triggers the overflow when testing or extracting the archive.
Exploitation
Is it being used?
Exploit prediction (EPSS)10.3% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CG
Cgpmcafee · Stalker
3.2 · source: NVD
FA
F-secure Anti-virus · F-secure
4.51; 4.51; 4.51; 4.52; 4.52; 4.52; +12 more · source: NVD
FF
F-secure For Firewalls · F-secure
6.20 · source: NVD
FI
F-secure Internet Security · F-secure
2003; 2004 · source: NVD
FP
F-secure Personal Express · F-secure
4.5; 4.6; 4.7 · source: NVD
FC
Fedora Core · Redhat
core_1.0 · source: NVD
IG
Internet Gatekeeper · F-secure
6.31; 6.32 · source: NVD
LH
Lha · Redhat
1.14i-9 · source: NVD
MA
Mailsweeper · Clearswift
4.0; 4.1; 4.2; 4.3; 4.3.3; 4.3.4; +8 more · source: NVD
PR
Propack · Sgi
2.4; 3.0 · source: NVD
WI
Winrar · Rarlab
3.20 · source: NVD
WI
Winzip · Winzip
9.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-0234
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-0234
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2006-04/0059.html
distro.conectiva.com.br
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000840
lists.grok.org.uk
http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/020776.html
lists.grok.org.uk
http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/020778.html
marc.info
http://marc.info/?l=bugtraq&m=108422737918885&w=2
Vendor Advisory
http://secunia.com/advisories/19514
More from Mailsweeper
–
CVE-2004-2328
Clearswift MAILsweeper for SMTP before 4.3_13 allows remote attackers to cause a denial of service (infinite loop) via an e-mail with a crafted RAR archive attached
–
CVE-2003-1015
Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use whitespace in an unusual fashion, which…
–
CVE-2003-1016
Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use malformed quoting in MIME headers,…
–
CVE-2004-0051
Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use non-standard but frequently supported…
–
CVE-2004-0052
Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use non-standard separator characters, or use…