Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 507
Alerts This Week
Warning Icon 1 507

Gentoo: GLSA-200405-01 Critical: LHa Security Vulnerability Exposure

gentoo
Calendar Grey May 9, 2004
Scroller Gentoo
Numerous security flaws discovered in LHa may result in unauthorized code execution or service disruption. Updating is recommended.
Two stack-based buffer overflows and two directory traversal problems have been found in LHa

Summary

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Gentoo Linux Security Advisory                           GLSA 200405-02
                                            https://security.gentoo.org/

  Severity: High
     Title: Multiple vulnerabilities in LHa
      Date: May 09, 2004
      Bugs: #49961
        ID: 200405-02


Synopsis
=======
Two stack-based buffer overflows and two directory traversal problems
have been found in LHa. These vulnerabilities can be used to execute
arbitrary code or as a denial of service attack.

Background
=========
LHa is a console-based program for packing and unpacking LHarc
archives.

Affected packages
================
    -------------------------------------------------------------------
     Package       /   Vulnerable   /                       Unaffected
    -------------------------------------------------------------------
  1  app-arch/lha      <= 114i-r1                           >= 114i-r2

==========
Ulf Harnhammar found two stack overflows and two directory traversal
vulnerabilities i...
Read the Full Advisory
Topics%20covered

Topics Covered

security advisory high severity gentoo buffer overflow code execution dos lha

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory high severity gentoo buffer overflow code execution dos lha

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround