Login Request a demo
Unscored severity · published Aug 18, 2004
CVE-2004-0235
Multiple directory traversal vulnerabilities in LHA 1.14 allow remote attackers or local users to create arbitrary files via an LHA archive containing filenames with (1)
–
CVSS
4.1%
EPSS
No
On KEV
Description
Multiple directory traversal vulnerabilities in LHA 1.14 allow remote attackers or local users to create arbitrary files via an LHA archive containing filenames with (1) .. sequences or (2) absolute pathnames with double leading slashes ("//absolute/path").
Exploitation
Is it being used?
Exploit prediction (EPSS)4.1% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CG
Cgpmcafee · Stalker
3.2 · source: NVD
FA
F-secure Anti-virus · F-secure
4.51; 4.51; 4.51; 4.52; 4.52; 4.52; +12 more · source: NVD
FF
F-secure For Firewalls · F-secure
6.20 · source: NVD
FI
F-secure Internet Security · F-secure
2003; 2004 · source: NVD
FP
F-secure Personal Express · F-secure
4.5; 4.6; 4.7 · source: NVD
FC
Fedora Core · Redhat
core_1.0 · source: NVD
IG
Internet Gatekeeper · F-secure
6.31; 6.32 · source: NVD
LH
Lha · Tsugio Okamoto
1.14; 1.15; 1.17 · source: NVD
MA
Mailsweeper · Clearswift
4.0; 4.1; 4.2; 4.3; 4.3.3; 4.3.4; +8 more · source: NVD
PR
Propack · Sgi
2.4; 3.0 · source: NVD
WI
Winrar · Rarlab
3.20 · source: NVD
WI
Winzip · Winzip
9.0 · source: NVD
Affected product
MA
Mailsweeper
Clearswift
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-0235
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-0235
distro.conectiva.com.br
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000840
lists.grok.org.uk
http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/020776.html
marc.info
http://marc.info/?l=bugtraq&m=108422737918885&w=2
security.gentoo.org
http://security.gentoo.org/glsa/glsa-200405-02.xml
www.debian.org
http://www.debian.org/security/2004/dsa-515
www.redhat.com
http://www.redhat.com/archives/fedora-announce-list/2004-May/msg00005.html
More from Mailsweeper
–
CVE-2004-2328
Clearswift MAILsweeper for SMTP before 4.3_13 allows remote attackers to cause a denial of service (infinite loop) via an e-mail with a crafted RAR archive attached
–
CVE-2003-1015
Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use whitespace in an unusual fashion, which…
–
CVE-2003-1016
Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use malformed quoting in MIME headers,…
–
CVE-2004-0051
Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use non-standard but frequently supported…
–
CVE-2004-0052
Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use non-standard separator characters, or use…