92 matches found
CVE-2004-0234
Multiple stack-based buffer overflows in the getheader function in header.c for LHA 1.14, as used in products such as Barracuda Spam Firewall, allow remote attackers or local users to execute arbitrary code via long directory or file names in an LHA archive, which triggers the overflow when testi...
CVE-2004-0234
Multiple stack-based buffer overflows in the getheader function in header.c for LHA 1.14, as used in products such as Barracuda Spam Firewall, allow remote attackers or local users to execute arbitrary code via long directory or file names in an LHA archive, which triggers the overflow when testi...
RHEL 2.1 / 3 : lha (RHSA-2004:178)
An updated LHA package that fixes several security vulnerabilities is now available. LHA is an archiving and compression utility for LHarc format archives. Ulf Harnhammar discovered two stack-based buffer overflows and two directory traversal flaws in LHA. An attacker could exploit the buffer...
Security fix for the ALT Linux 6 package lha version 2:1.14i-alt1
May 8, 2004 Michael Shigorin 2:1.14i-alt1 - security fixes for CAN-2004-0234, CAN-2004-0235 patch taken from RH - symlink patch from the same source - spec cleanup little modification by inger...
CVE-2004-0234
CVE-2004-0234: LHA 1.14 contains multiple stack-based buffer overflows in get_header() of header.c, allowing remote attackers or local users to execute arbitrary code via long directory/file names in an LHA archive. The issue affects LHA as used in products such as Barracuda Spam Firewall; overfl...
CVE-2002-0234
CVE-2002-0234 affects NetScreen ScreenOS prior to 2.6.1. The issue is a lack of a maximum concurrent-session limit, allowing a trusted-network attacker to perform a port scan to an external network that exhausts connections and causes denial of service. The provided documents describe the vulnera...
CVE-2001-0234
NewsDaemon before 0.21b allows remote attackers to execute arbitrary SQL queries and gain privileges via a malformed userusername parameter...
CVE-2001-0234
NewsDaemon is affected prior to version 0.21b, where a malformed user_username parameter allows remote attackers to execute arbitrary SQL queries and gain administrative privileges on the web site. The issue enables remote access to administer NewsDaemon through the web interface. Remediation: up...
CVE-2001-0234
NewsDaemon before 0.21b allows remote attackers to execute arbitrary SQL queries and gain privileges via a malformed userusername parameter...
CVE-2000-0234
CVE-2000-0234 affects the Cobalt RaQ2 and RaQ3 appliances via the default access.conf configuration, which permits remote attackers to view the contents of a ".htaccess" file. The root cause is the default configuration allowing this exposure, leading to partial confidentiality impact. The connec...
CVE-1999-0234
The CVE-1999-0234 issue involves Bash treating any byte with value 0xFF as a command separator, per the CVE record and related entries (Red Hat, CVE list, EUVD, PT-1996-1035). These connected documents confirm the underlying root cause (parsing of 0xFF) but do not specify exact affected Bash vers...