Buffer overflow in Clearswift Mailsweeper
CVE-2004-0234
Multiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as used in products such as Barracuda Spam Firewall, allow remote attackers or local users to execute arbitrary code via long directory or file names in an LHA archive, which triggers the overflow when testing or extracting the archive.
Vulnerability class: Buffer Overflow
Published · last modified .
CVSS v2 metric
CVSS v2 base score 10.0 (High). Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.103 (95.7th percentile), scored .
Moderate probability of exploitation in the next 30 days — watch for active exploitation reports. 96th percentile — 95.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.103 · newest: 0.103 · change: 0.000
Affected products
- Clearswift Mailsweeper — versions 4.0, 4.1, 4.2
- F-Secure Anti-Virus — versions 4.51, 4.52, 4.60
- F-Secure For Firewalls — versions 6.20
- F-Secure Internet Security — versions 2003, 2004
- F-Secure Personal Express — versions 4.5, 4.6, 4.7
- F-Secure Internet Gatekeeper — versions 6.31, 6.32
- Rarlab Winrar — versions 3.20
- Sgi Propack — versions 2.4, 3.0
- Stalker Cgpmcafee — versions 3.2
- Tsugio Okamoto Lha — versions 1.14, 1.15, 1.17
Weakness classification (CWE)
References
- securitytracker.com/id (vdb-entry)
- distro.conectiva.com.br/atualizacoes/ (vendor-advisory)
- www.osvdb.org/5753 (vdb-entry)
- oval.cisecurity.org/repository/search/definition/oval:org.mitre.oval:def:977 (signature, vdb-entry)
- www.redhat.com/archives/fedora-announce-list/2004-May/msg00005.html (vendor-advisory)
- archives.neohapsis.com/archives/bugtraq/2006-04/0059.html (mailing-list)
- www.securityfocus.com/bid/10243 (Exploit, Patch, vdb-entry, Vendor Advisory)
- www.vupen.com/english/advisories/2006/1220 (vdb-entry, Vendor Advisory)
- lists.grok.org.uk/pipermail/full-disclosure/2004-May/020776.html (mailing-list)
- secunia.com/advisories/19514 (Vendor Advisory, third-party-advisory)