CVE-2004-0235

Description

Multiple directory traversal vulnerabilities in LHA 1.14 allow remote attackers or local users to create arbitrary files via an LHA archive containing filenames with (1) .. sequences or (2) absolute pathnames with double leading slashes ("//absolute/path").

References

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A978

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10409

https://exchange.xforce.ibmcloud.com/vulnerabilities/16013

https://bugzilla.fedora.us/show_bug.cgi?id=1833

http://www.redhat.com/support/errata/RHSA-2004-179.html

http://www.redhat.com/support/errata/RHSA-2004-178.html

http://www.redhat.com/archives/fedora-announce-list/2004-May/msg00005.html

http://www.debian.org/security/2004/dsa-515

http://security.gentoo.org/glsa/glsa-200405-02.xml

http://marc.info/?l=bugtraq&m=108422737918885&w=2

http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/020776.html

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000840

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3