cve/2004/CVE-2004-0235.md

18 lines
768 B
Markdown
Raw Normal View History

2024-05-26 14:27:05 +02:00
### [CVE-2004-0235](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0235)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)
### Description
Multiple directory traversal vulnerabilities in LHA 1.14 allow remote attackers or local users to create arbitrary files via an LHA archive containing filenames with (1) .. sequences or (2) absolute pathnames with double leading slashes ("//absolute/path").
### POC
#### Reference
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A978
#### Github
No PoCs found on GitHub currently.