PT-2004-1063 · Lha+1 · Lha+1

Ulf Harnhammar · Published 2004-08-04 · Updated 2017-10-11 · CVE-2004-0769

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions LHA versions (affected versions not specified) lha-1.00

Description The issue is related to a buffer overflow in LHA, allowing remote attackers to execute arbitrary code via long pathnames in LHarc format 2 headers for a .LHZ archive. This can be exploited through various options. Multiple vulnerabilities in the lha package may lead to breaches of confidentiality, integrity, and availability of protected information, and can be exploited remotely.

Recommendations For LHA, update the header.c file to fix the buffer overflow issue. For lha-1.00, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2015-06300

CVE-2004-0769

RHSA-2004:323

Affected Products

Lha

Lha-1.00

References · 12

• 🔥 http://bugs.gentoo.org/show_bug.cgi?id=51285 · Exploit
• http://gentoo.org/security/en/glsa/glsa-200409-13.xml · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2004-323.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-06300 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2004-0769 · Security Note
• https://bugzilla.fedora.us/show_bug.cgi?id=1833 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2004-440.html · Vendor Advisory
• https://rhn.redhat.com/errata/RHSA-2004-440.html · Note
• http://lw.ftw.zamosc.pl/lha-exploit.txt · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11047 · Note
• http://marc.info/?l=bugtraq&m=108745217504379&w=2 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16917 · Note