Multiple directory traversal vulnerabilities in LHA 1.14 allow remote attackers or local users to create arbitrary files via an LHA archive containing filenames with (1) .. sequences or (2) absolute pathnames with double leading slashes ("//absolute/path").

Threat-Mapped Scoring

Score: 0.0

Priority: Unclassified

EPSS

Score: 0.06964
Percentile: 0.90994

CVSS Scoring

Affected Products

• cpe:2.3:a:clearswift:mailsweeper:4.0:*:*:*:*:*:*:*
• cpe:2.3:a:clearswift:mailsweeper:4.1:*:*:*:*:*:*:*
• cpe:2.3:a:clearswift:mailsweeper:4.2:*:*:*:*:*:*:*
• cpe:2.3:a:clearswift:mailsweeper:4.3:*:*:*:*:*:*:*
• cpe:2.3:a:clearswift:mailsweeper:4.3.3:*:*:*:*:*:*:*
• cpe:2.3:a:clearswift:mailsweeper:4.3.4:*:*:*:*:*:*:*
• cpe:2.3:a:clearswift:mailsweeper:4.3.5:*:*:*:*:*:*:*
• cpe:2.3:a:clearswift:mailsweeper:4.3.6:*:*:*:*:*:*:*
• cpe:2.3:a:clearswift:mailsweeper:4.3.6_sp1:*:*:*:*:*:*:*
• cpe:2.3:a:clearswift:mailsweeper:4.3.7:*:*:*:*:*:*:*
• cpe:2.3:a:clearswift:mailsweeper:4.3.8:*:*:*:*:*:*:*
• cpe:2.3:a:clearswift:mailsweeper:4.3.10:*:*:*:*:*:*:*
• cpe:2.3:a:clearswift:mailsweeper:4.3.11:*:*:*:*:*:*:*
• cpe:2.3:a:clearswift:mailsweeper:4.3.13:*:*:*:*:*:*:*
• cpe:2.3:a:f-secure:f-secure_anti-virus:4.51:*:linux_gateways:*:*:*:*:*
• cpe:2.3:a:f-secure:f-secure_anti-virus:4.51:*:linux_servers:*:*:*:*:*
• cpe:2.3:a:f-secure:f-secure_anti-virus:4.51:*:linux_workstations:*:*:*:*:*
• cpe:2.3:a:f-secure:f-secure_anti-virus:4.52:*:linux_gateways:*:*:*:*:*
• cpe:2.3:a:f-secure:f-secure_anti-virus:4.52:*:linux_servers:*:*:*:*:*
• cpe:2.3:a:f-secure:f-secure_anti-virus:4.52:*:linux_workstations:*:*:*:*:*
• cpe:2.3:a:f-secure:f-secure_anti-virus:4.60:*:samba_servers:*:*:*:*:*
• cpe:2.3:a:f-secure:f-secure_anti-virus:5.5:*:client_security:*:*:*:*:*
• cpe:2.3:a:f-secure:f-secure_anti-virus:5.41:*:mimesweeper:*:*:*:*:*
• cpe:2.3:a:f-secure:f-secure_anti-virus:5.41:*:windows_servers:*:*:*:*:*
• cpe:2.3:a:f-secure:f-secure_anti-virus:5.41:*:workstations:*:*:*:*:*
• cpe:2.3:a:f-secure:f-secure_anti-virus:5.42:*:mimesweeper:*:*:*:*:*
• cpe:2.3:a:f-secure:f-secure_anti-virus:5.42:*:windows_servers:*:*:*:*:*
• cpe:2.3:a:f-secure:f-secure_anti-virus:5.42:*:workstations:*:*:*:*:*
• cpe:2.3:a:f-secure:f-secure_anti-virus:5.52:*:client_security:*:*:*:*:*
• cpe:2.3:a:f-secure:f-secure_anti-virus:6.21:*:ms_exchange:*:*:*:*:*
• cpe:2.3:a:f-secure:f-secure_anti-virus:2003:*:*:*:*:*:*:*
• cpe:2.3:a:f-secure:f-secure_anti-virus:2004:*:*:*:*:*:*:*
• cpe:2.3:a:f-secure:f-secure_for_firewalls:6.20:*:*:*:*:*:*:*
• cpe:2.3:a:f-secure:f-secure_internet_security:2003:*:*:*:*:*:*:*
• cpe:2.3:a:f-secure:f-secure_internet_security:2004:*:*:*:*:*:*:*
• cpe:2.3:a:f-secure:f-secure_personal_express:4.5:*:*:*:*:*:*:*
• cpe:2.3:a:f-secure:f-secure_personal_express:4.6:*:*:*:*:*:*:*
• cpe:2.3:a:f-secure:f-secure_personal_express:4.7:*:*:*:*:*:*:*
• cpe:2.3:a:f-secure:internet_gatekeeper:6.31:*:*:*:*:*:*:*
• cpe:2.3:a:f-secure:internet_gatekeeper:6.32:*:*:*:*:*:*:*
• cpe:2.3:a:rarlab:winrar:3.20:*:*:*:*:*:*:*
• cpe:2.3:a:redhat:lha:1.14i-9:*:i386:*:*:*:*:*
• cpe:2.3:a:sgi:propack:2.4:*:*:*:*:*:*:*
• cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*
• cpe:2.3:a:stalker:cgpmcafee:3.2:*:*:*:*:*:*:*
• cpe:2.3:a:tsugio_okamoto:lha:1.14:*:*:*:*:*:*:*
• cpe:2.3:a:tsugio_okamoto:lha:1.15:*:*:*:*:*:*:*
• cpe:2.3:a:tsugio_okamoto:lha:1.17:*:*:*:*:*:*:*
• cpe:2.3:a:winzip:winzip:9.0:*:*:*:*:*:*:*
• cpe:2.3:o:redhat:fedora_core:core_1.0:*:*:*:*:*:*:*

← Back to Home