CVE-2004-0771 Buffer overflow in the extract_one function from lhext.c in LHA may allow attackers to execute arbitrary code via a long w (working directory) command line option, a different issue than CVE-2004-0769...
HighCVSS 10.0
EPSS 18.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the extract_one function from lhext.c in LHA may allow attackers to execute arbitrary code via a long w (working directory) command line option, a different issue than CVE-2004-0769. NOTE: this issue may be REJECTED if there are not any cases in which LHA is setuid or is otherwise used across security boundaries.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tsugio okamoto lha | = 1.14 | No fix listed |
| tsugio okamoto lha | = 1.15 | No fix listed |
| tsugio okamoto lha | = 1.17 | No fix listed |
References
- bugs.gentoo.org
- 20040606 Re: [SECURITY] [DSA 515-1] New lha packages fix several mailing-list
- GLSA-200409-13 vendor-advisory
- RHSA-2004:323 vendor-advisory
- RHSA-2004:440 vendor-advisory
- 20040515 lha buffer overflow(s) again mailing-list
- 10354 patch vdb-entry vendor-advisory
- FLSA:1833 vendor-advisory
- lha-extractone-bo(16196) vdb-entry
- oval:org.mitre.oval:def:9595 signature vdb-entry