Vulnerabilities > CVE-2006-3901 - LHA Buffer Overflow vulnerability in Tumbleweed MailGate Email Firewall

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
tumbleweed
NVD
Published: 2006-07-27
Updated: 2018-10-17

Summary

Multiple stack-based buffer overflows in Tumbleweed Email Firewall (EMF) allow remote attackers to execute arbitrary code via an email attachment with an LHA archive that contains a (1) file or (2) directory with a long LHA extended header, (3) an LHA archive in which the "temporary pathname" field for decompressed output is greater than 2 bytes, or (4) an LHA archive with a long filename.

Vulnerable Configurations

Part Description Count
Application
Tumbleweed
1

References