Description
Multiple stack-based buffer overflows in Tumbleweed Email Firewall (EMF) allow remote attackers to execute arbitrary code via an email attachment with an LHA archive that contains a (1) file or (2) directory with a long LHA extended header, (3) an LHA archive in which the "temporary pathname" field for decompressed output is greater than 2 bytes, or (4) an LHA archive with a long filename.
References
- 20060725 Hustle -- Tumbleweed Email Firewall Remote Vulnerability mailing-list
- 21194 third-party-advisory
- http://www.hustlelabs.com/advisories/04072006_tweed.pdf
- 27495 vdb-entry
- 20060724 Hustle -- Tumbleweed Email Firewall Remote mailing-list
- 19146 vdb-entry
- ADV-2006-2970 vdb-entry