NetSight
IP …
medium6.4

CVE-2004-0235

Multiple directory traversal vulnerabilities in LHA 1.14 allow remote attackers or local users to create arbitrary files via an LHA archive containing filename…

Impact

Multiple directory traversal vulnerabilities in LHA 1.14 allow remote attackers or local users to create arbitrary files via an LHA archive containing filenames with (1) .. sequences or (2) absolute pathnames with double leading slashes ("//absolute/path").

Affected products

VendorProductAffected versions
ClearswiftMailsweeper
Versions 4.0, 4.1, 4.2, 4.3, 4.3.3, 4.3.4
F-SecureF-Secure Anti-Virus
Versions 4.51, 4.52, 4.60, 5.5, 5.41, 5.42
F-SecureF-Secure For Firewalls
Version 6.20
F-SecureF-Secure Internet Security
Versions 2003, 2004
F-SecureF-Secure Personal Express
Versions 4.5, 4.6, 4.7
F-SecureInternet Gatekeeper
Versions 6.31, 6.32
RarlabWinrar
Version 3.20
RedhatLha
Version 1.14i-9
SgiPropack
Versions 2.4, 3.0
StalkerCgpmcafee
Version 3.2
Tsugio OkamotoLha
Versions 1.14, 1.15, 1.17
WinzipWinzip
Version 9.0

References