CVE-2004-0235 Path traversal in n/a
Remote attackers can create arbitrary files on the victim's system by tricking them into opening a malicious LHA archive containing path traversal sequences.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2004-0235?
CVE-2004-0235 is a medium-severity path traversal vulnerability in Redhat Fedora Core, published on 5 May 2004. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Multiple directory traversal vulnerabilities in LHA 1.14 allow remote attackers or local users to create arbitrary files via an LHA archive containing filenames with (1) .. sequences or (2) absolute pathnames with double leading slashes ("//absolute/path").
Which versions are affected by CVE-2004-0235?
It affects 13 products.
Products include Clearswift Mailsweeper, F-Secure F-Secure Anti-Virus, F-Secure F-Secure for Firewalls, F-Secure F-Secure Internet Security, F-Secure F-Secure Personal Express, F-Secure Internet Gatekeeper and 7 more.
How do I fix CVE-2004-0235?
Upgrade to a fixed version.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2004-0235 being exploited?
There is no known exploitation of CVE-2004-0235 in the wild and no public exploit code.
Other vulnerabilities in Redhat Fedora Core
Sources
Also known as GHSA-v492-qprp-rvhr.