PT-2004-1063 · Lha+1 · Lha+1

Ulf Harnhammar

·

Publicado

2004-08-04

·

Atualizado

2017-10-11

·

CVE-2004-0769

CVSS v2.0

10

Alta

VetorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions LHA versions (affected versions not specified) lha-1.00
Description The issue is related to a buffer overflow in LHA, allowing remote attackers to execute arbitrary code via long pathnames in LHarc format 2 headers for a .LHZ archive. This can be exploited through various options. Multiple vulnerabilities in the lha package may lead to breaches of confidentiality, integrity, and availability of protected information, and can be exploited remotely.
Recommendations For LHA, update the header.c file to fix the buffer overflow issue. For lha-1.00, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

BDU:2015-06300
CVE-2004-0769
RHSA-2004:323

Produtos afetados

Lha
Lha-1.00