FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2004-0234

This CVE name corresponds to:

Entered Topic
2004-05-02 lha buffer overflows and path traversal issues

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

Details

Type Candidate
Name CVE-2004-0234
Phase Assigned(20040317)

Description

Multiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as used in products such as Barracuda Spam Firewall, allow remote attackers or local users to execute arbitrary code via long directory or file names in an LHA archive, which triggers the overflow when testing or extracting the archive.

References

Source Reference
FULLDISC 20040501 LHa buffer overflows and directory traversal problems
FULLDISC 20040502 Lha local stack overflow Proof Of Concept Code
BUGTRAQ 20040510 [Ulf Harnhammar]: LHA Advisory + Patch
BUGTRAQ 20060403 Barracuda LHA archiver security bug leads to remote compromise
MISC http://www.guay-leroux.com/projects/barracuda-advisory-LHA.txt
CONECTIVA CLA-2004:840
DEBIAN DSA-515
FEDORA FLSA:1833
REDHAT RHSA-2004:178
REDHAT RHSA-2004:179
GENTOO GLSA-200405-02
FEDORA FEDORA-2004-119
BID 10243
OVAL oval:org.mitre.oval:def:9881
VUPEN ADV-2006-1220
OSVDB 5753
OSVDB 5754
OVAL oval:org.mitre.oval:def:977
SECTRACK 1015866
SECUNIA 19514
XF lha-multiple-bo(16012)