CVE-2004-0947

highPriorität · verfolgen · 43EPSS 0.074 · 94. PerzentilEURUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

7.37% (94th) EPSS

CVSS 10 · high

Is it mine?

15 products

Prüfe deine Angriffsfläche

Who says so?

4 sources

enisa_euvd · fstec_bdu · nvd · redhat_csaf

EPSS · bewertet 2026-10-23

Buffer overflow in unarj before 2.63a-r2 allows remote attackers to execute arbitrary code via an arj archive that contains long filenames.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

BehobenRed Hat Enterprise Linux AS (Advanced Server) version 2.1 redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/
https://access.redhat.com/errata/RHSA-2005:007
BehobenRed Hat Enterprise Linux ES version 2.1redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/
https://access.redhat.com/errata/RHSA-2005:007
BehobenRed Hat Enterprise Linux WS version 2.1redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/
https://access.redhat.com/errata/RHSA-2005:007
BehobenRed Hat Linux Advanced Workstation 2.1redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/
https://access.redhat.com/errata/RHSA-2005:007

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

10.0

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · high–critical · 8.5–10

v2.010highAV:N/AC:L/Au:N/C:C/I:C/A:Cprimary · NVD / NIST USAusnutzbarkeit 10 · Auswirkung 10

v2.010criticalAV:N/AC:L/Au:N/C:C/I:C/A:Csecondary · FSTEC (BDU) RU

v2.08.5highAV:N/AC:L/Au:N/C:C/I:C/A:C/E:Usecondary · CVSS-BT (t0sche)

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-119US

betroffene Produkte (15)

Betroffene Produkte und Versionsbereiche.

n/a n/a≤ n/aenisa_euvdEU
ARJ Software Inc. unarj≤ 2.63a-r2fstec_bduRU
Huawei Technologies Co., Ltd. USG6330≤ V100R001C30SPC600fstec_bduRU
arj software inc. unarj= 2.62nvdUScpe:2.3:a:arj_software_inc.:unarj:*:*:*:*:*:*:*:*
arj software inc. unarj= 2.63_anvdUScpe:2.3:a:arj_software_inc.:unarj:*:*:*:*:*:*:*:*
arj software inc. unarj= 2.64nvdUScpe:2.3:a:arj_software_inc.:unarj:*:*:*:*:*:*:*:*
arj software inc. unarj= 2.65nvdUScpe:2.3:a:arj_software_inc.:unarj:*:*:*:*:*:*:*:*
gentoo linuxalle VersionennvdUScpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*
suse suse linux= 9.0nvdUScpe:2.3:o:suse:suse_linux:*:*:*:*:*:*:*:*
suse suse linux= 9.1nvdUScpe:2.3:o:suse:suse_linux:*:*:*:*:*:*:*:*
suse suse linux= 9.2nvdUScpe:2.3:o:suse:suse_linux:*:*:*:*:*:*:*:*
Red Hat Enterprise Linux AS (Advanced Server) version 2.1 alle Versionenfixedredhat_csafUScpe:/o:redhat:enterprise_linux:2.1::as
Red Hat Enterprise Linux ES version 2.1alle Versionenfixedredhat_csafUScpe:/o:redhat:enterprise_linux:2.1::es
Red Hat Enterprise Linux WS version 2.1alle Versionenfixedredhat_csafUScpe:/o:redhat:enterprise_linux:2.1::ws
Red Hat Linux Advanced Workstation 2.1alle Versionenfixedredhat_csafUScpe:/o:redhat:enterprise_linux:2.1::aw

Advisories (1)

Hersteller- und Ökosystem-Meldungen dazu.

RHSA-2005:007Red Hat Security Advisory: unarj security update2005-01-12csaf · redhat_csafUS
An updated unarj package that fixes a buffer overflow vulnerability and a directory traversal vulnerability is now available.

auch bekannt als (8)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

enisa_euvd fstec_bdu nvd redhat_csaf NVD CVE.org MITRE

veröffentlicht 2005-02-09geändert 2026-06-16

Referenzen (12)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan