CVE-2004-0771
- State
- Published
- Severity
- Not scored
- Published
- Aug 5, 2004
- Updated
- Aug 8, 2024
- Reserved
- Aug 4, 2004
Description
Buffer overflow in the extract_one function from lhext.c in LHA may allow attackers to execute arbitrary code via a long w (working directory) command line option, a different issue than CVE-2004-0769. NOTE: this issue may be REJECTED if there are not any cases in which LHA is setuid or is otherwise used across security boundaries.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- RHSA-2004:323vendor-advisory
- 10354vdb-entry
- http://bugs.gentoo.org/show_bug.cgi?id=51285
- oval:org.mitre.oval:def:9595vdb-entrysignature
- lha-extractone-bo(16196)vdb-entry
- 20040515 lha buffer overflow(s) againmailing-list
- FLSA:1833vendor-advisory
- GLSA-200409-13vendor-advisory
- RHSA-2004:440vendor-advisory
- 20040606 Re: [SECURITY] [DSA 515-1] New lha packages fix severalmailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.