Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:lha:1.14i-9:*:i386:*:*:*:*:*

part: a version: 1.14i-9 update: *

VendorRedhat (e942785a-ca89-506e-bd99-50782639cde3)
ProductLha (70662d55-dcae-58c5-9fdb-ce052bb4ac52)
Editioni386
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2004-0235 vulnerable 2026-06-08 04:47:49.155960 Details available
Multiple directory traversal vulnerabilities in LHA 1.14 allow remote attackers or local users to create arbitrary files via an LHA archive containing filenames with (1) .. sequences or (2) absolute pathnames with double leading slashes ("//absolute/path").
Published: 2004-05-05T04:00:00.000Z
Updated: 2024-08-08T00:10:03.724Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0234 vulnerable 2026-06-08 04:47:49.150388 Details available
Multiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as used in products such as Barracuda Spam Firewall, allow remote attackers or local users to execute arbitrary code via long directory or file names in an LHA archive, which triggers the overflow when testing or extracting the archive.
Published: 2004-05-05T04:00:00.000Z
Updated: 2024-08-08T00:10:03.930Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.