CVE-2004-0235

Fixed in a distro release EPSS 4%

Multiple directory traversal vulnerabilities in LHA 1.14 allow remote attackers or local users to create arbitrary files via an LHA archive containing filenames with (1) .. sequences or (2) absolute pathnames with double leading slashes ("//absolute/path").

Published 2004-05-05 · CVE record · OSV

Products: clearswift mailsweeper, f-secure_anti-virus, f-secure_for_firewalls, f-secure_internet_security, f-secure_personal_express, f-secure internet_gatekeeper, rarlab winrar, redhat lha, sgi propack, stalker cgpmcafee, tsugio_okamoto lha, winzip, redhat fedora_core

Distro releases