CVE-2004-0234 Multiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as used in products such as Barracuda Spam Firewall, allow remote attackers or local users to execute arbitra...
HighCVSS 10.0
EPSS 10.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as used in products such as Barracuda Spam Firewall, allow remote attackers or local users to execute arbitrary code via long directory or file names in an LHA archive, which triggers the overflow when testing or extracting the archive.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| clearswift mailsweeper | = 4.0 | No fix listed |
| clearswift mailsweeper | = 4.1 | No fix listed |
| clearswift mailsweeper | = 4.2 | No fix listed |
| clearswift mailsweeper | = 4.3 | No fix listed |
| clearswift mailsweeper | = 4.3.3 | No fix listed |
| clearswift mailsweeper | = 4.3.4 | No fix listed |
| clearswift mailsweeper | = 4.3.5 | No fix listed |
| clearswift mailsweeper | = 4.3.6 | No fix listed |
| clearswift mailsweeper | = 4.3.6_sp1 | No fix listed |
| clearswift mailsweeper | = 4.3.7 | No fix listed |
| clearswift mailsweeper | = 4.3.8 | No fix listed |
| clearswift mailsweeper | = 4.3.10 | No fix listed |
| clearswift mailsweeper | = 4.3.11 | No fix listed |
| clearswift mailsweeper | = 4.3.13 | No fix listed |
| f-secure anti-virus | = 4.51 | No fix listed |
| f-secure anti-virus | = 4.52 | No fix listed |
| f-secure anti-virus | = 4.60 | No fix listed |
| f-secure anti-virus | = 5.5 | No fix listed |
| f-secure anti-virus | = 5.41 | No fix listed |
| f-secure anti-virus | = 5.42 | No fix listed |
| f-secure anti-virus | = 5.52 | No fix listed |
| f-secure anti-virus | = 6.21 | No fix listed |
| f-secure anti-virus | = 2003 | No fix listed |
| f-secure anti-virus | = 2004 | No fix listed |
| f-secure for firewalls | = 6.20 | No fix listed |
Show 17 more
| Product | Affected versions | Fixed in |
|---|---|---|
| f-secure internet security | = 2003 | No fix listed |
| f-secure internet security | = 2004 | No fix listed |
| f-secure personal express | = 4.5 | No fix listed |
| f-secure personal express | = 4.6 | No fix listed |
| f-secure personal express | = 4.7 | No fix listed |
| f-secure internet gatekeeper | = 6.31 | No fix listed |
| f-secure internet gatekeeper | = 6.32 | No fix listed |
| rarlab winrar | = 3.20 | No fix listed |
| redhat lha | = 1.14i-9 | No fix listed |
| sgi propack | = 2.4 | No fix listed |
| sgi propack | = 3.0 | No fix listed |
| stalker cgpmcafee | = 3.2 | No fix listed |
| tsugio okamoto lha | = 1.14 | No fix listed |
| tsugio okamoto lha | = 1.15 | No fix listed |
| tsugio okamoto lha | = 1.17 | No fix listed |
| winzip | = 9.0 | No fix listed |
| redhat fedora core | = core_1.0 | No fix listed |
References
- 20060403 Barracuda LHA archiver security bug leads to remote compromise mailing-list
- CLA-2004:840 vendor-advisory
- 20040501 LHa buffer overflows and directory traversal problems mailing-list
- 20040502 Lha local stack overflow Proof Of Concept Code mailing-list
- 20040510 [Ulf Harnhammar]: LHA Advisory + Patch mailing-list
- 19514 third-party-advisory vendor-advisory
- GLSA-200405-02 vendor-advisory
- 1015866 vdb-entry
- DSA-515 vendor-advisory
- www.guay-leroux.com
- 5753 vdb-entry
- 5754 vdb-entry
- FEDORA-2004-119 vendor-advisory
- RHSA-2004:178 vendor-advisory
- RHSA-2004:179 vendor-advisory
- 10243 exploit patch vdb-entry vendor-advisory
- ADV-2006-1220 vdb-entry vendor-advisory
- FLSA:1833 vendor-advisory
- lha-multiple-bo(16012) vdb-entry
- oval:org.mitre.oval:def:977 signature vdb-entry
- oval:org.mitre.oval:def:9881 signature vdb-entry