CVE-2004-0235: Medium severity clearswift mailsweeper vulnerability

Published May 5, 2004

Updated

Multiple directory traversal vulnerabilities in LHA 1.14 allow remote attackers or local users to create arbitrary files via an LHA archive containing filenames with (1) .. sequences or (2) absolute pathnames with double leading slashes ("//absolute/path").

Affected Software

50 affected components

Clearswift MAILsweeper=4.0

Clearswift MAILsweeper=4.1

Clearswift MAILsweeper=4.2

Clearswift MAILsweeper=4.3

Clearswift MAILsweeper=4.3.3

Clearswift MAILsweeper=4.3.4

Clearswift MAILsweeper=4.3.5

Clearswift MAILsweeper=4.3.6

Clearswift MAILsweeper=4.3.6_sp1

Clearswift MAILsweeper=4.3.7

Clearswift MAILsweeper=4.3.8

Clearswift MAILsweeper=4.3.10

Clearswift MAILsweeper=4.3.11

Clearswift MAILsweeper=4.3.13

F-Secure F-Secure anti-virus=4.51

F-Secure F-Secure anti-virus=4.52

F-Secure F-Secure anti-virus=4.60

F-Secure F-Secure anti-virus=5.5

F-Secure F-Secure anti-virus=5.41

F-Secure F-Secure anti-virus=5.42

F-Secure F-Secure anti-virus=5.52

F-Secure F-Secure anti-virus=6.21

F-Secure F-Secure anti-virus=2003

F-Secure F-Secure anti-virus=2004

F-Secure F-secure For Firewalls=6.20

F-Secure F-Secure Internet Security=2003

F-Secure F-Secure Internet Security=2004

F-Secure F-secure Personal Express=4.5

F-Secure F-secure Personal Express=4.6

F-Secure F-secure Personal Express=4.7

F-Secure Internet Gatekeeper=6.31

F-Secure Internet Gatekeeper=6.32

RARLAB WinRAR=3.20

redhat Lha=1.14i-9

SGI ProPack=2.4

SGI ProPack=3.0

Stalker Cgpmcafee=3.2

Tsugio Okamoto Lha=1.14

Tsugio Okamoto Lha=1.15

Tsugio Okamoto Lha=1.17

Winzip Winzip=9.0

redhat Fedora Core=core_1.0

Remediation

Patch Available

http://www.securityfocus.com/bid/10243

Event History

May 5, 2004

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2004-0235?

CVE-2004-0235 has been classified as a moderate severity vulnerability due to the potential for arbitrary file creation.

How do I fix CVE-2004-0235?

To fix CVE-2004-0235, ensure you upgrade to a patched version of LHA, specifically versions beyond 1.14.

What types of attacks are possible with CVE-2004-0235?

CVE-2004-0235 allows attackers to exploit directory traversal vulnerabilities to create arbitrary files on the system.

Which software versions are affected by CVE-2004-0235?

Affected software includes LHA versions prior to 1.14, as well as Clearswift Mailsweeper and various versions of F-Secure Anti-Virus.

Who is at risk for CVE-2004-0235?

Users and systems using the affected versions of LHA and other associated software are at risk for exploitation of CVE-2004-0235.