NVD

Id
70685  
Name
CVE-2004-0234  
Description
Multiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as used in products such as Barracuda Spam Firewall, allow remote attackers or local users to execute arbitrary code via long directory or file names in an LHA archive, which triggers the overflow when testing or extracting the archive.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-07-18  
Published
2004-08-18  
Modified Date
2017-07-10  
Seq
2004-0234  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
364703 70685 CVE-2004-0234 20060403 Barracuda LHA archiver security bug leads to remote compromise  View
364704 70685 CVE-2004-0234 CLA-2004:840  View
364705 70685 CVE-2004-0234 20040501 LHa buffer overflows and directory traversal problems  View
364706 70685 CVE-2004-0234 20040502 Lha local stack overflow Proof Of Concept Code  View
364707 70685 CVE-2004-0234 20040510 [Ulf Harnhammar]: LHA Advisory + Patch  View
364708 70685 CVE-2004-0234 oval:org.mitre.oval:def:977  View
364709 70685 CVE-2004-0234 oval:org.mitre.oval:def:9881  View
364710 70685 CVE-2004-0234 GLSA-200405-02  View
364711 70685 CVE-2004-0234 1015866  View
364712 70685 CVE-2004-0234 DSA-515  View
364713 70685 CVE-2004-0234 http://www.guay-leroux.com/projects/barracuda-advisory-LHA.txt  View
364714 70685 CVE-2004-0234 FEDORA-2004-119  View
364715 70685 CVE-2004-0234 RHSA-2004:178  View
364716 70685 CVE-2004-0234 RHSA-2004:179  View
364717 70685 CVE-2004-0234 10243  View
364718 70685 CVE-2004-0234 ADV-2006-1220  View
364719 70685 CVE-2004-0234 lha-multiple-bo(16012)  View
364720 70685 CVE-2004-0234 FLSA:1833  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62827 JVNDB-2004-000169 LHa の Test/eXtract ルーチンにおけるバッファオーバーフローの脆弱性 LHa for UNIX には、書庫をテストまたは解凍する際に、ヘッダ情報の長さを適切に取り扱わない複数の不備が存在するため、バッファオーバーフローが発生する脆弱性が存在します。 CVE-2004-0234 8661 CVE-2004-0234 70685 10 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000169.html 2004-04-30 2007-04-01 View