CVE-2004-0235 : Multiple directory traversal vulnerabilities in LHA 1.14 allow remote attackers

Multiple directory traversal vulnerabilities in LHA 1.14 allow remote attackers or local users to create arbitrary files via an LHA archive containing filenames with (1) .. sequences or (2) absolute pathnames with double leading slashes ("//absolute/path").

Published 2004-08-18 04:00:00

Updated 2017-10-11 01:29:25

Source MITRE

View at NVD, CVE.org

Vulnerability category: Directory traversal

Products affected by CVE-2004-0235

SGI » Propack » Version: 3.0
cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*
Matching versions
SGI » Propack » Version: 2.4
cpe:2.3:a:sgi:propack:2.4:*:*:*:*:*:*:*
Matching versions
Redhat » Fedora Core » Version: Core 1.0
cpe:2.3:o:redhat:fedora_core:core_1.0:*:*:*:*:*:*:*
Matching versions
Redhat » LHA » Version: 1.14i-9 I386 Edition
cpe:2.3:a:redhat:lha:1.14i-9:*:i386:*:*:*:*:*
Matching versions
Stalker » Cgpmcafee » Version: 3.2
cpe:2.3:a:stalker:cgpmcafee:3.2:*:*:*:*:*:*:*
Matching versions
Clearswift » Mailsweeper » Version: 4.0
cpe:2.3:a:clearswift:mailsweeper:4.0:*:*:*:*:*:*:*
Matching versions
Clearswift » Mailsweeper » Version: 4.1
cpe:2.3:a:clearswift:mailsweeper:4.1:*:*:*:*:*:*:*
Matching versions
Clearswift » Mailsweeper » Version: 4.2
cpe:2.3:a:clearswift:mailsweeper:4.2:*:*:*:*:*:*:*
Matching versions
Clearswift » Mailsweeper » Version: 4.3
cpe:2.3:a:clearswift:mailsweeper:4.3:*:*:*:*:*:*:*
Matching versions
Clearswift » Mailsweeper » Version: 4.3.10
cpe:2.3:a:clearswift:mailsweeper:4.3.10:*:*:*:*:*:*:*
Matching versions
Clearswift » Mailsweeper » Version: 4.3.3
cpe:2.3:a:clearswift:mailsweeper:4.3.3:*:*:*:*:*:*:*
Matching versions
Clearswift » Mailsweeper » Version: 4.3.4
cpe:2.3:a:clearswift:mailsweeper:4.3.4:*:*:*:*:*:*:*
Matching versions
Clearswift » Mailsweeper » Version: 4.3.5
cpe:2.3:a:clearswift:mailsweeper:4.3.5:*:*:*:*:*:*:*
Matching versions
Clearswift » Mailsweeper » Version: 4.3.7
cpe:2.3:a:clearswift:mailsweeper:4.3.7:*:*:*:*:*:*:*
Matching versions
Clearswift » Mailsweeper » Version: 4.3.8
cpe:2.3:a:clearswift:mailsweeper:4.3.8:*:*:*:*:*:*:*
Matching versions
Clearswift » Mailsweeper » Version: 4.3.6
cpe:2.3:a:clearswift:mailsweeper:4.3.6:*:*:*:*:*:*:*
Matching versions
Clearswift » Mailsweeper » Version: 4.3.6 Sp1
cpe:2.3:a:clearswift:mailsweeper:4.3.6_sp1:*:*:*:*:*:*:*
Matching versions
Clearswift » Mailsweeper » Version: 4.3.11
cpe:2.3:a:clearswift:mailsweeper:4.3.11:*:*:*:*:*:*:*
Matching versions
Clearswift » Mailsweeper » Version: 4.3.13
cpe:2.3:a:clearswift:mailsweeper:4.3.13:*:*:*:*:*:*:*
Matching versions
Winzip » Winzip » Version: 9.0
cpe:2.3:a:winzip:winzip:9.0:*:*:*:*:*:*:*
Matching versions
Rarlab » Winrar » Version: 3.20
cpe:2.3:a:rarlab:winrar:3.20:*:*:*:*:*:*:*
Matching versions
F-secure » Internet Gatekeeper » Version: 6.32
cpe:2.3:a:f-secure:internet_gatekeeper:6.32:*:*:*:*:*:*:*
Matching versions
F-secure » Internet Gatekeeper » Version: 6.31
cpe:2.3:a:f-secure:internet_gatekeeper:6.31:*:*:*:*:*:*:*
Matching versions
F-secure » F-secure Anti-virus » Version: 4.51 Linux Servers Edition
cpe:2.3:a:f-secure:f-secure_anti-virus:4.51:*:linux_servers:*:*:*:*:*
Matching versions
F-secure » F-secure Anti-virus » Version: 4.51 Linux Workstations Edition
cpe:2.3:a:f-secure:f-secure_anti-virus:4.51:*:linux_workstations:*:*:*:*:*
Matching versions
F-secure » F-secure Anti-virus » Version: 5.41 Workstations Edition
cpe:2.3:a:f-secure:f-secure_anti-virus:5.41:*:workstations:*:*:*:*:*
Matching versions
F-secure » F-secure Anti-virus » Version: 5.42 Mimesweeper Edition
cpe:2.3:a:f-secure:f-secure_anti-virus:5.42:*:mimesweeper:*:*:*:*:*
Matching versions
F-secure » F-secure Anti-virus » Version: 4.52 Linux Gateways Edition
cpe:2.3:a:f-secure:f-secure_anti-virus:4.52:*:linux_gateways:*:*:*:*:*
Matching versions
F-secure » F-secure Anti-virus » Version: 4.52 Linux Servers Edition
cpe:2.3:a:f-secure:f-secure_anti-virus:4.52:*:linux_servers:*:*:*:*:*
Matching versions
F-secure » F-secure Anti-virus » Version: 5.42 Windows Servers Edition
cpe:2.3:a:f-secure:f-secure_anti-virus:5.42:*:windows_servers:*:*:*:*:*
Matching versions
F-secure » F-secure Anti-virus » Version: 5.42 Workstations Edition
cpe:2.3:a:f-secure:f-secure_anti-virus:5.42:*:workstations:*:*:*:*:*
Matching versions
F-secure » F-secure Anti-virus » Version: 2003
cpe:2.3:a:f-secure:f-secure_anti-virus:2003:*:*:*:*:*:*:*
Matching versions
F-secure » F-secure Anti-virus » Version: 4.52 Linux Workstations Edition
cpe:2.3:a:f-secure:f-secure_anti-virus:4.52:*:linux_workstations:*:*:*:*:*
Matching versions
F-secure » F-secure Anti-virus » Version: 4.60 Samba Servers Edition
cpe:2.3:a:f-secure:f-secure_anti-virus:4.60:*:samba_servers:*:*:*:*:*
Matching versions
F-secure » F-secure Anti-virus » Version: 5.5 Client Security Edition
cpe:2.3:a:f-secure:f-secure_anti-virus:5.5:*:client_security:*:*:*:*:*
Matching versions
F-secure » F-secure Anti-virus » Version: 5.52 Client Security Edition
cpe:2.3:a:f-secure:f-secure_anti-virus:5.52:*:client_security:*:*:*:*:*
Matching versions
F-secure » F-secure Anti-virus » Version: 2004
cpe:2.3:a:f-secure:f-secure_anti-virus:2004:*:*:*:*:*:*:*
Matching versions
F-secure » F-secure Anti-virus » Version: 4.51 Linux Gateways Edition
cpe:2.3:a:f-secure:f-secure_anti-virus:4.51:*:linux_gateways:*:*:*:*:*
Matching versions
F-secure » F-secure Anti-virus » Version: 5.41 Mimesweeper Edition
cpe:2.3:a:f-secure:f-secure_anti-virus:5.41:*:mimesweeper:*:*:*:*:*
Matching versions
F-secure » F-secure Anti-virus » Version: 5.41 Windows Servers Edition
cpe:2.3:a:f-secure:f-secure_anti-virus:5.41:*:windows_servers:*:*:*:*:*
Matching versions
F-secure » F-secure Anti-virus » Version: 6.21 Ms Exchange Edition
cpe:2.3:a:f-secure:f-secure_anti-virus:6.21:*:ms_exchange:*:*:*:*:*
Matching versions
F-secure » F-secure For Firewalls » Version: 6.20
cpe:2.3:a:f-secure:f-secure_for_firewalls:6.20:*:*:*:*:*:*:*
Matching versions
F-secure » F-secure Internet Security » Version: 2003
cpe:2.3:a:f-secure:f-secure_internet_security:2003:*:*:*:*:*:*:*
Matching versions
F-secure » F-secure Internet Security » Version: 2004
cpe:2.3:a:f-secure:f-secure_internet_security:2004:*:*:*:*:*:*:*
Matching versions
F-secure » F-secure Personal Express » Version: 4.5
cpe:2.3:a:f-secure:f-secure_personal_express:4.5:*:*:*:*:*:*:*
Matching versions
F-secure » F-secure Personal Express » Version: 4.6
cpe:2.3:a:f-secure:f-secure_personal_express:4.6:*:*:*:*:*:*:*
Matching versions
F-secure » F-secure Personal Express » Version: 4.7
cpe:2.3:a:f-secure:f-secure_personal_express:4.7:*:*:*:*:*:*:*
Matching versions
Tsugio Okamoto » LHA » Version: 1.14
cpe:2.3:a:tsugio_okamoto:lha:1.14:*:*:*:*:*:*:*
Matching versions
Tsugio Okamoto » LHA » Version: 1.15
cpe:2.3:a:tsugio_okamoto:lha:1.15:*:*:*:*:*:*:*
Matching versions
Tsugio Okamoto » LHA » Version: 1.17
cpe:2.3:a:tsugio_okamoto:lha:1.17:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2004-0235

EPSS FAQ

0.48%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 76 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2004-0235

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
6.4	MEDIUM	AV:N/AC:L/Au:N/C:P/I:P/A:N	10.0	4.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: None

References for CVE-2004-0235

Jump to

Vulnerability Details : CVE-2004-0235

Products affected by CVE-2004-0235

Exploit prediction scoring system (EPSS) score for CVE-2004-0235

CVSS scores for CVE-2004-0235

References for CVE-2004-0235