CVE-2004-0745 LHA 1.14 and earlier allows attackers to execute arbitrary commands via a directory with shell metacharacters in its name.
HighCVSS 10.0
EPSS 3.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
LHA 1.14 and earlier allows attackers to execute arbitrary commands via a directory with shell metacharacters in its name.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tsugio okamoto lha | <= 1.14 | No fix listed |
References
- GLSA-200409-13 vendor-advisory
- RHSA-2004:323 vendor-advisory
- RHSA-2004:440 patch vendor-advisory
- FLSA:1833 vendor-advisory
- lha-metacharacter-command-execution(17198) vdb-entry
- oval:org.mitre.oval:def:11088 signature vdb-entry