CVE-2004-0235
N/A
N/A
Summary
Multiple directory traversal vulnerabilities in LHA 1.14 allow remote attackers or local users to create arbitrary files via an LHA archive containing filenames with (1) .. sequences or (2) absolute pathnames with double leading slashes ("//absolute/path").
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000840
- http://www.redhat.com/archives/fedora-announce-list/2004-May/msg00005.html
- http://www.securityfocus.com/bid/10243
- http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/020776.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16013
- http://www.redhat.com/support/errata/RHSA-2004-179.html
- https://bugzilla.fedora.us/show_bug.cgi?id=1833
- http://www.debian.org/security/2004/dsa-515
- http://marc.info/?l=bugtraq&m=108422737918885&w=2
- http://security.gentoo.org/glsa/glsa-200405-02.xml
- http://www.redhat.com/support/errata/RHSA-2004-178.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A978
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10409
References
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000840
- http://www.redhat.com/archives/fedora-announce-list/2004-May/msg00005.html
- http://www.securityfocus.com/bid/10243
- http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/020776.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16013
- http://www.redhat.com/support/errata/RHSA-2004-179.html
- https://bugzilla.fedora.us/show_bug.cgi?id=1833
- http://www.debian.org/security/2004/dsa-515
- http://marc.info/?l=bugtraq&m=108422737918885&w=2
- http://security.gentoo.org/glsa/glsa-200405-02.xml
- http://www.redhat.com/support/errata/RHSA-2004-178.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A978
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10409
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.