CVE-2004-0234 - CVE House
Back to Database
Status published Critical CVE-2004-0234

Multiple stack-based buffer overflows in the get_header function in header.c...

Vulnerability Description

Multiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as used in products such as Barracuda Spam Firewall, allow remote attackers or local users to execute arbitrary code via long directory or file names in an LHA archive, which triggers the overflow when testing or extracting the archive.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2004-0234

Credits & Attribution

No credits recorded in the NVD database.

References

More from clearswift

View All →
CVE-2006-3523
Clearswift MIMEsweeper for Web before 5.1.15 Hotfix allows remote attackers...
Medium 5
CVE-2006-3522
Cross-site scripting (XSS) vulnerability in Clearswift MIMEsweeper for Web before...
Medium 4.3
CVE-2006-3216
Clearswift MAILsweeper for SMTP before 4.3.20 and MAILsweeper for Exchange...
Medium 5
CVE-2006-3215
Clearswift MAILsweeper for SMTP before 4.3.20 and MAILsweeper for Exchange...
High 7.5
CVE-2005-4526
Clearswift MIMEsweeper For Web (a.k.a. WEBsweeper) 4.0 through 5.1 allows...
Medium 5

Affected Vendor

Affected Software

mailsweeper, f-secure anti-virus, f-secure for firewalls, f-secure internet security, f-secure personal express, internet gatekeeper, winrar, lha, propack, cgpmcafee, winzip, fedora core
Vulnerable Versions:
4.0, 4.1, 4.2, 4.3, 4.3.3, 4.3.4, 4.3.5, 4.3.6, 4.3.6_sp1, 4.3.7, 4.3.8, 4.3.10, 4.3.11, 4.3.13, 4.51, 4.52, 4.60, 5.5, 5.41, 5.42, 5.52, 6.21, 2003, 2004, 6.20, 4.5, 4.6, 4.7, 6.31, 6.32, 3.20, 1.14i-9, 2.4, 3.0, 3.2, 1.14, 1.15, 1.17, 9.0, core_1.0

Timeline

Official Publish: May 5th, 2004
Last Modified: August 8th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.