Published: 28/09/2004 Updated: 11/10/2017

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

VMScore: 890

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

LHA 1.14 and previous versions allows malicious users to execute arbitrary commands via a directory with shell metacharacters in its name.

Vulnerable Product	Search on Vulmon	Subscribe to Product
tsugio okamoto lha

Synopsis lha security update Type/Severity Security Advisory: Important Topic An updated lha package that fixes a buffer overflow is now available Description LHA is an archiving and compression utility for LHarc format archivesLukasz Wojtow discovered a stack-based buffer overflow in all ...

NVD-CWE-Other http://www.redhat.com/support/errata/RHSA-2004-440.html http://www.gentoo.org/security/en/glsa/glsa-200409-13.xml https://bugzilla.fedora.us/show_bug.cgi?id=1833 http://www.redhat.com/support/errata/RHSA-2004-323.html https://exchange.xforce.ibmcloud.com/vulnerabilities/17198 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11088 https://access.redhat.com/errata/RHSA-2004:323 https://nvd.nist.gov

CVE-2004-0745

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect