6.4

CVE-2004-0235

Exploit
Multiple directory traversal vulnerabilities in LHA 1.14 allow remote attackers or local users to create arbitrary files via an LHA archive containing filenames with (1) .. sequences or (2) absolute pathnames with double leading slashes ("//absolute/path").
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Clearswift ≫ Mailsweeper Version 4.0
Clearswift ≫ Mailsweeper Version 4.1
Clearswift ≫ Mailsweeper Version 4.2
Clearswift ≫ Mailsweeper Version 4.3
Clearswift ≫ Mailsweeper Version 4.3.3
Clearswift ≫ Mailsweeper Version 4.3.4
Clearswift ≫ Mailsweeper Version 4.3.5
Clearswift ≫ Mailsweeper Version 4.3.6
Clearswift ≫ Mailsweeper Version 4.3.6_sp1
Clearswift ≫ Mailsweeper Version 4.3.7
Clearswift ≫ Mailsweeper Version 4.3.8
Clearswift ≫ Mailsweeper Version 4.3.10
Clearswift ≫ Mailsweeper Version 4.3.11
Clearswift ≫ Mailsweeper Version 4.3.13
F-secure ≫ F-secure Anti-virus Version 4.51 Edition linux_gateways
F-secure ≫ F-secure Anti-virus Version 4.51 Edition linux_servers
F-secure ≫ F-secure Anti-virus Version 4.51 Edition linux_workstations
F-secure ≫ F-secure Anti-virus Version 4.52 Edition linux_gateways
F-secure ≫ F-secure Anti-virus Version 4.52 Edition linux_servers
F-secure ≫ F-secure Anti-virus Version 4.52 Edition linux_workstations
F-secure ≫ F-secure Anti-virus Version 4.60 Edition samba_servers
F-secure ≫ F-secure Anti-virus Version 5.5 Edition client_security
F-secure ≫ F-secure Anti-virus Version 5.41 Edition mimesweeper
F-secure ≫ F-secure Anti-virus Version 5.41 Edition windows_servers
F-secure ≫ F-secure Anti-virus Version 5.41 Edition workstations
F-secure ≫ F-secure Anti-virus Version 5.42 Edition mimesweeper
F-secure ≫ F-secure Anti-virus Version 5.42 Edition windows_servers
F-secure ≫ F-secure Anti-virus Version 5.42 Edition workstations
F-secure ≫ F-secure Anti-virus Version 5.52 Edition client_security
F-secure ≫ F-secure Anti-virus Version 6.21 Edition ms_exchange
F-secure ≫ F-secure Anti-virus Version 2003
F-secure ≫ F-secure Anti-virus Version 2004
F-secure ≫ F-secure For Firewalls Version 6.20
F-secure ≫ Internet Gatekeeper Version 6.31
F-secure ≫ Internet Gatekeeper Version 6.32
RARLAB ≫ WinRAR Version 3.20
Redhat ≫ Lha Version 1.14i-9 Edition i386
Sgi ≫ Propack Version 2.4
Sgi ≫ Propack Version 3.0
Stalker ≫ Cgpmcafee Version 3.2
Tsugio Okamoto ≫ Lha Version 1.14
Tsugio Okamoto ≫ Lha Version 1.15
Tsugio Okamoto ≫ Lha Version 1.17
Winzip ≫ Winzip Version 9.0
Redhat ≫ Fedora Core Version core_1.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.12% 0.895
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.4 10 4.9
AV:N/AC:L/Au:N/C:P/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000840
http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/020776.html
http://marc.info/?l=bugtraq&m=108422737918885&w=2
http://security.gentoo.org/glsa/glsa-200405-02.xml
http://www.debian.org/security/2004/dsa-515
http://www.redhat.com/archives/fedora-announce-list/2004-May/msg00005.html
http://www.redhat.com/support/errata/RHSA-2004-178.html
http://www.redhat.com/support/errata/RHSA-2004-179.html
http://www.securityfocus.com/bid/10243
Patch
Vendor Advisory
Exploit
https://bugzilla.fedora.us/show_bug.cgi?id=1833
https://exchange.xforce.ibmcloud.com/vulnerabilities/16013
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10409
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A978