// For flags

CVE-2004-0234

 

Severity Score

10.0
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

1
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Multiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as used in products such as Barracuda Spam Firewall, allow remote attackers or local users to execute arbitrary code via long directory or file names in an LHA archive, which triggers the overflow when testing or extracting the archive.

Múltiples desbordamientos de búfer basados en la pila en la función get_header de header.c de LHA 1.14 utilizado en productos como Barracuda Spam Firewall, permite a atacantes remotos o a usuarios locales ejecutar código arbitrario mediante nombres de fichero o de directorio largos en un archivo LHA, lo que dispara el desbordamiento cuando se prueba o se extrae un fichero.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
Complete
Integrity
Complete
Availability
Complete
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2004-03-17 CVE Reserved
  • 2004-05-04 CVE Published
  • 2023-04-12 EPSS Updated
  • 2024-08-08 CVE Updated
  • 2024-08-08 First Exploit
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
  • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
References (23)
URL Date SRC
http://www.securityfocus.com/bid/10243 2024-08-08
URL Date SRC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Clearswift
Search vendor "Clearswift"
Mailsweeper
Search vendor "Clearswift" for product "Mailsweeper"
4.0
Search vendor "Clearswift" for product "Mailsweeper" and version "4.0"
-
Affected
Clearswift
Search vendor "Clearswift"
Mailsweeper
Search vendor "Clearswift" for product "Mailsweeper"
4.1
Search vendor "Clearswift" for product "Mailsweeper" and version "4.1"
-
Affected
Clearswift
Search vendor "Clearswift"
Mailsweeper
Search vendor "Clearswift" for product "Mailsweeper"
4.2
Search vendor "Clearswift" for product "Mailsweeper" and version "4.2"
-
Affected
Clearswift
Search vendor "Clearswift"
Mailsweeper
Search vendor "Clearswift" for product "Mailsweeper"
4.3
Search vendor "Clearswift" for product "Mailsweeper" and version "4.3"
-
Affected
Clearswift
Search vendor "Clearswift"
Mailsweeper
Search vendor "Clearswift" for product "Mailsweeper"
4.3.3
Search vendor "Clearswift" for product "Mailsweeper" and version "4.3.3"
-
Affected
Clearswift
Search vendor "Clearswift"
Mailsweeper
Search vendor "Clearswift" for product "Mailsweeper"
4.3.4
Search vendor "Clearswift" for product "Mailsweeper" and version "4.3.4"
-
Affected
Clearswift
Search vendor "Clearswift"
Mailsweeper
Search vendor "Clearswift" for product "Mailsweeper"
4.3.5
Search vendor "Clearswift" for product "Mailsweeper" and version "4.3.5"
-
Affected
Clearswift
Search vendor "Clearswift"
Mailsweeper
Search vendor "Clearswift" for product "Mailsweeper"
4.3.6
Search vendor "Clearswift" for product "Mailsweeper" and version "4.3.6"
-
Affected
Clearswift
Search vendor "Clearswift"
Mailsweeper
Search vendor "Clearswift" for product "Mailsweeper"
4.3.6_sp1
Search vendor "Clearswift" for product "Mailsweeper" and version "4.3.6_sp1"
-
Affected
Clearswift
Search vendor "Clearswift"
Mailsweeper
Search vendor "Clearswift" for product "Mailsweeper"
4.3.7
Search vendor "Clearswift" for product "Mailsweeper" and version "4.3.7"
-
Affected
Clearswift
Search vendor "Clearswift"
Mailsweeper
Search vendor "Clearswift" for product "Mailsweeper"
4.3.8
Search vendor "Clearswift" for product "Mailsweeper" and version "4.3.8"
-
Affected
Clearswift
Search vendor "Clearswift"
Mailsweeper
Search vendor "Clearswift" for product "Mailsweeper"
4.3.10
Search vendor "Clearswift" for product "Mailsweeper" and version "4.3.10"
-
Affected
Clearswift
Search vendor "Clearswift"
Mailsweeper
Search vendor "Clearswift" for product "Mailsweeper"
4.3.11
Search vendor "Clearswift" for product "Mailsweeper" and version "4.3.11"
-
Affected
Clearswift
Search vendor "Clearswift"
Mailsweeper
Search vendor "Clearswift" for product "Mailsweeper"
4.3.13
Search vendor "Clearswift" for product "Mailsweeper" and version "4.3.13"
-
Affected
F-secure
Search vendor "F-secure"
F-secure Anti-virus
Search vendor "F-secure" for product "F-secure Anti-virus"
4.51
Search vendor "F-secure" for product "F-secure Anti-virus" and version "4.51"
linux_gateways
Affected
F-secure
Search vendor "F-secure"
F-secure Anti-virus
Search vendor "F-secure" for product "F-secure Anti-virus"
4.51
Search vendor "F-secure" for product "F-secure Anti-virus" and version "4.51"
linux_servers
Affected
F-secure
Search vendor "F-secure"
F-secure Anti-virus
Search vendor "F-secure" for product "F-secure Anti-virus"
4.51
Search vendor "F-secure" for product "F-secure Anti-virus" and version "4.51"
linux_workstations
Affected
F-secure
Search vendor "F-secure"
F-secure Anti-virus
Search vendor "F-secure" for product "F-secure Anti-virus"
4.52
Search vendor "F-secure" for product "F-secure Anti-virus" and version "4.52"
linux_gateways
Affected
F-secure
Search vendor "F-secure"
F-secure Anti-virus
Search vendor "F-secure" for product "F-secure Anti-virus"
4.52
Search vendor "F-secure" for product "F-secure Anti-virus" and version "4.52"
linux_servers
Affected
F-secure
Search vendor "F-secure"
F-secure Anti-virus
Search vendor "F-secure" for product "F-secure Anti-virus"
4.52
Search vendor "F-secure" for product "F-secure Anti-virus" and version "4.52"
linux_workstations
Affected
F-secure
Search vendor "F-secure"
F-secure Anti-virus
Search vendor "F-secure" for product "F-secure Anti-virus"
4.60
Search vendor "F-secure" for product "F-secure Anti-virus" and version "4.60"
samba_servers
Affected
F-secure
Search vendor "F-secure"
F-secure Anti-virus
Search vendor "F-secure" for product "F-secure Anti-virus"
5.5
Search vendor "F-secure" for product "F-secure Anti-virus" and version "5.5"
client_security
Affected
F-secure
Search vendor "F-secure"
F-secure Anti-virus
Search vendor "F-secure" for product "F-secure Anti-virus"
5.41
Search vendor "F-secure" for product "F-secure Anti-virus" and version "5.41"
mimesweeper
Affected
F-secure
Search vendor "F-secure"
F-secure Anti-virus
Search vendor "F-secure" for product "F-secure Anti-virus"
5.41
Search vendor "F-secure" for product "F-secure Anti-virus" and version "5.41"
windows_servers
Affected
F-secure
Search vendor "F-secure"
F-secure Anti-virus
Search vendor "F-secure" for product "F-secure Anti-virus"
5.41
Search vendor "F-secure" for product "F-secure Anti-virus" and version "5.41"
workstations
Affected
F-secure
Search vendor "F-secure"
F-secure Anti-virus
Search vendor "F-secure" for product "F-secure Anti-virus"
5.42
Search vendor "F-secure" for product "F-secure Anti-virus" and version "5.42"
mimesweeper
Affected
F-secure
Search vendor "F-secure"
F-secure Anti-virus
Search vendor "F-secure" for product "F-secure Anti-virus"
5.42
Search vendor "F-secure" for product "F-secure Anti-virus" and version "5.42"
windows_servers
Affected
F-secure
Search vendor "F-secure"
F-secure Anti-virus
Search vendor "F-secure" for product "F-secure Anti-virus"
5.42
Search vendor "F-secure" for product "F-secure Anti-virus" and version "5.42"
workstations
Affected
F-secure
Search vendor "F-secure"
F-secure Anti-virus
Search vendor "F-secure" for product "F-secure Anti-virus"
5.52
Search vendor "F-secure" for product "F-secure Anti-virus" and version "5.52"
client_security
Affected
F-secure
Search vendor "F-secure"
F-secure Anti-virus
Search vendor "F-secure" for product "F-secure Anti-virus"
6.21
Search vendor "F-secure" for product "F-secure Anti-virus" and version "6.21"
ms_exchange
Affected
F-secure
Search vendor "F-secure"
F-secure Anti-virus
Search vendor "F-secure" for product "F-secure Anti-virus"
2003
Search vendor "F-secure" for product "F-secure Anti-virus" and version "2003"
-
Affected
F-secure
Search vendor "F-secure"
F-secure Anti-virus
Search vendor "F-secure" for product "F-secure Anti-virus"
2004
Search vendor "F-secure" for product "F-secure Anti-virus" and version "2004"
-
Affected
F-secure
Search vendor "F-secure"
F-secure For Firewalls
Search vendor "F-secure" for product "F-secure For Firewalls"
6.20
Search vendor "F-secure" for product "F-secure For Firewalls" and version "6.20"
-
Affected
F-secure
Search vendor "F-secure"
F-secure Internet Security
Search vendor "F-secure" for product "F-secure Internet Security"
2003
Search vendor "F-secure" for product "F-secure Internet Security" and version "2003"
-
Affected
F-secure
Search vendor "F-secure"
F-secure Internet Security
Search vendor "F-secure" for product "F-secure Internet Security"
2004
Search vendor "F-secure" for product "F-secure Internet Security" and version "2004"
-
Affected
F-secure
Search vendor "F-secure"
F-secure Personal Express
Search vendor "F-secure" for product "F-secure Personal Express"
4.5
Search vendor "F-secure" for product "F-secure Personal Express" and version "4.5"
-
Affected
F-secure
Search vendor "F-secure"
F-secure Personal Express
Search vendor "F-secure" for product "F-secure Personal Express"
4.6
Search vendor "F-secure" for product "F-secure Personal Express" and version "4.6"
-
Affected
F-secure
Search vendor "F-secure"
F-secure Personal Express
Search vendor "F-secure" for product "F-secure Personal Express"
4.7
Search vendor "F-secure" for product "F-secure Personal Express" and version "4.7"
-
Affected
F-secure
Search vendor "F-secure"
Internet Gatekeeper
Search vendor "F-secure" for product "Internet Gatekeeper"
6.31
Search vendor "F-secure" for product "Internet Gatekeeper" and version "6.31"
-
Affected
F-secure
Search vendor "F-secure"
Internet Gatekeeper
Search vendor "F-secure" for product "Internet Gatekeeper"
6.32
Search vendor "F-secure" for product "Internet Gatekeeper" and version "6.32"
-
Affected
Rarlab
Search vendor "Rarlab"
Winrar
Search vendor "Rarlab" for product "Winrar"
3.20
Search vendor "Rarlab" for product "Winrar" and version "3.20"
-
Affected
Redhat
Search vendor "Redhat"
Lha
Search vendor "Redhat" for product "Lha"
1.14i-9
Search vendor "Redhat" for product "Lha" and version "1.14i-9"
i386
Affected
Sgi
Search vendor "Sgi"
Propack
Search vendor "Sgi" for product "Propack"
2.4
Search vendor "Sgi" for product "Propack" and version "2.4"
-
Affected
Sgi
Search vendor "Sgi"
Propack
Search vendor "Sgi" for product "Propack"
3.0
Search vendor "Sgi" for product "Propack" and version "3.0"
-
Affected
Stalker
Search vendor "Stalker"
Cgpmcafee
Search vendor "Stalker" for product "Cgpmcafee"
3.2
Search vendor "Stalker" for product "Cgpmcafee" and version "3.2"
-
Affected
Tsugio Okamoto
Search vendor "Tsugio Okamoto"
Lha
Search vendor "Tsugio Okamoto" for product "Lha"
1.14
Search vendor "Tsugio Okamoto" for product "Lha" and version "1.14"
-
Affected
Tsugio Okamoto
Search vendor "Tsugio Okamoto"
Lha
Search vendor "Tsugio Okamoto" for product "Lha"
1.15
Search vendor "Tsugio Okamoto" for product "Lha" and version "1.15"
-
Affected
Tsugio Okamoto
Search vendor "Tsugio Okamoto"
Lha
Search vendor "Tsugio Okamoto" for product "Lha"
1.17
Search vendor "Tsugio Okamoto" for product "Lha" and version "1.17"
-
Affected
Winzip
Search vendor "Winzip"
Winzip
Search vendor "Winzip" for product "Winzip"
9.0
Search vendor "Winzip" for product "Winzip" and version "9.0"
-
Affected
Redhat
Search vendor "Redhat"
Fedora Core
Search vendor "Redhat" for product "Fedora Core"
core_1.0
Search vendor "Redhat" for product "Fedora Core" and version "core_1.0"
-
Affected