VDB
CVE-2004-0235
CVE-2004-0235
PUBLISHED
CVSS 6.400000095367432 MEDIUM
Multiple directory traversal vulnerabilities in LHA 1.14 allow remote attackers or local users to create arbitrary files via an LHA archive containing filenames with (1) .. sequences or (2) absolute pathnames with double leading slashes ("//absolute/path").
EPSS 4.12% · 90.7th percentile
Risk Scores
CVSS 2.0
6.400000095367432
EPSS Score
4.12%
90.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| stalker | cgpmcafee | 3.2 |
| f-secure | f-secure_internet_security | 2003, 2004 |
| clearswift | mailsweeper | 4.3.10, 4.1, 4.2 |
| tsugio_okamoto | lha | 1.15, 1.14, 1.17 |
| rarlab | winrar | 3.20 |
| f-secure | internet_gatekeeper | 6.32, 6.31 |
| n/a | n/a | n/a |
| f-secure | f-secure_anti-virus | 5.42, 5.5, 4.60 |
| redhat | fedora_core | core_1.0 |
| winzip | winzip | 9.0 |
| f-secure | f-secure_for_firewalls | 6.20 |
| redhat | lha | 1.14i-9 |
| f-secure | f-secure_personal_express | 4.5, 4.6, 4.7 |
| sgi | propack | 3.0, 2.4 |
Timeline
- Apr 30, 2004 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 21, 2022 EPSS Score
- Sep 5, 2022 EPSS Score
- Oct 28, 2022 EPSS Score
- Dec 20, 2022 EPSS Score
- Feb 11, 2023 EPSS Score
- Apr 5, 2023 EPSS Score
- May 28, 2023 EPSS Score
- Jul 20, 2023 EPSS Score
- Sep 11, 2023 EPSS Score
References
- FEDORA-2004-119 vendor-advisory
- 20040501 LHa buffer overflows and directory traversal problems mailing-list
- lha-directory-traversal(16013) vdb
- 20040510 [Ulf Harnhammar]: LHA Advisory + Patch mailing-list
- GLSA-200405-02 vendor-advisory
- DSA-515 vendor-advisory
- oval:org.mitre.oval:def:978 vdb
- https://nvd.nist.gov/vuln/detail/CVE-2004-0235 advisory
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000840 url
- http://www.redhat.com/support/errata/RHSA-2004-178.html technical
- https://bugzilla.fedora.us/show_bug.cgi?id=1833 technical
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10409 technical
- http://www.redhat.com/support/errata/RHSA-2004-179.html technical
- http://www.securityfocus.com/bid/10243 exploit