F-Secure For Firewalls vulnerabilities

4 CVEs affecting F-Secure For Firewalls, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2004-2442, published 2004-12-31.

More from F-Secure.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2004-2442, published 2004-12-31. Medium severity, CVSS 5.0. EPSS: 10.6% chance of exploitation in the next 30 days. Multiple interpretation error in various F-Secure Anti-Virus products, including Workstation 5.43 and earlier, Windows Servers 5.50 and earlier, MIMEsweeper 5.50 and earlier, Anti-Virus for Linux…
• CVE-2004-0234, published 2004-08-18. High severity, CVSS 10.0. EPSS: 10.3% chance of exploitation in the next 30 days. Multiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as used in products such as Barracuda Spam Firewall, allow remote attackers or local users to execute…
• CVE-2004-0235, published 2004-08-18. Medium severity, CVSS 6.4. EPSS: 4.1% chance of exploitation in the next 30 days. Multiple directory traversal vulnerabilities in LHA 1.14 allow remote attackers or local users to create arbitrary files via an LHA archive containing filenames with (1) .. sequences or (2) absolute…
• CVE-2004-2405, published 2004-12-31. Medium severity, CVSS 6.4. EPSS: 1.7% chance of exploitation in the next 30 days. Buffer overflow in multiple F-Secure Anti-Virus products, including F-Secure Anti-Virus 5.42 and earlier, allows remote attackers to bypass scanning or cause a denial of service (crash or module…