CVE-2004-0235 | BDVDB-2026-6388 Detail
Description#
Multiple directory traversal vulnerabilities in LHA 1.14 allow remote attackers or local users to create arbitrary files via an LHA archive containing filenames with (1) .. sequences or (2) absolute pathnames with double leading slashes ("//absolute/path").
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000840
- http://www.redhat.com/archives/fedora-announce-list/2004-May/msg00005.html
- http://www.securityfocus.com/bid/10243
- http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/020776.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16013
- http://www.redhat.com/support/errata/RHSA-2004-179.html
- https://bugzilla.fedora.us/show_bug.cgi?id=1833
- http://www.debian.org/security/2004/dsa-515
- http://marc.info/?l=bugtraq&m=108422737918885&w=2
- http://security.gentoo.org/glsa/glsa-200405-02.xml
- http://www.redhat.com/support/errata/RHSA-2004-178.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A978
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10409
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.