← Database

CVE-2004-0235

MEDIUM CVSS: 6.4 Published: 2004-08-18 Modified: 2026-06-16

Description

Multiple directory traversal vulnerabilities in LHA 1.14 allow remote attackers or local users to create arbitrary files via an LHA archive containing filenames with (1) .. sequences or (2) absolute pathnames with double leading slashes ("//absolute/path").

Affected Platforms

F-Secure Internet GatekeeperRedhat LhaTsugio Okamoto LhaWinzip WinzipClearswift MailsweeperRedhat Fedora CoreStalker CgpmcafeeF-Secure F-Secure For FirewallsF-Secure F-Secure Internet SecuritySgi Propack

Weakness Type

NVD-CWE-Other

References