CVE-2004-0234

high · 10

Multiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as used in products such as Barracuda Spam Firewall, allow remote attackers or local users to execute arbitrary code via long directory or file names in an LHA archive, which triggers the overflow when testing or extracting the archive.

CVSS

10.3%

EPSS (exploit prob.)

95th

EPSS percentile

2004-08-18

Published

AV:N/AC:L/Au:N/C:C/I:C/A:C

Weaknesses

CWE-119

Affected products

Vendor	Product	Affected versions
clearswift	mailsweeper	4.0
clearswift	mailsweeper	4.1
clearswift	mailsweeper	4.2
clearswift	mailsweeper	4.3
clearswift	mailsweeper	4.3.3
clearswift	mailsweeper	4.3.4
clearswift	mailsweeper	4.3.5
clearswift	mailsweeper	4.3.6
clearswift	mailsweeper	4.3.6_sp1
clearswift	mailsweeper	4.3.7
clearswift	mailsweeper	4.3.8
clearswift	mailsweeper	4.3.10
clearswift	mailsweeper	4.3.11
clearswift	mailsweeper	4.3.13
f-secure	f-secure_anti-virus	4.51
f-secure	f-secure_anti-virus	4.51
f-secure	f-secure_anti-virus	4.51
f-secure	f-secure_anti-virus	4.52
f-secure	f-secure_anti-virus	4.52
f-secure	f-secure_anti-virus	4.52
f-secure	f-secure_anti-virus	4.60
f-secure	f-secure_anti-virus	5.5
f-secure	f-secure_anti-virus	5.41
f-secure	f-secure_anti-virus	5.41
f-secure	f-secure_anti-virus	5.41
f-secure	f-secure_anti-virus	5.42
f-secure	f-secure_anti-virus	5.42
f-secure	f-secure_anti-virus	5.42
f-secure	f-secure_anti-virus	5.52
f-secure	f-secure_anti-virus	6.21
f-secure	f-secure_anti-virus	2003
f-secure	f-secure_anti-virus	2004
f-secure	f-secure_for_firewalls	6.20
f-secure	f-secure_internet_security	2003
f-secure	f-secure_internet_security	2004
f-secure	f-secure_personal_express	4.5
f-secure	f-secure_personal_express	4.6
f-secure	f-secure_personal_express	4.7
f-secure	internet_gatekeeper	6.31
f-secure	internet_gatekeeper	6.32

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2004-0234