Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Gentoo: GLSA-200409-13 Normal: Command Execution and Code Execution

gentoo
Calendar Grey September 8, 2004
Scroller Gentoo
Exploits exploiting buffer overflow flaws in LHa necessitate prompt user updates to fortify systems against potential threats and intrusions.
Several buffer overflows and a shell metacharacter command execution vulnerability have been found in LHa

Summary

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Gentoo Linux Security Advisory                           GLSA 200409-13
                                            https://security.gentoo.org/

  Severity: Normal
     Title: LHa: Multiple vulnerabilities
      Date: September 08, 2004
      Bugs: #62618
        ID: 200409-13


Synopsis
=======
Several buffer overflows and a shell metacharacter command execution
vulnerability have been found in LHa. These vulnerabilities can be
used to execute arbitrary code.

Background
=========
LHa is a console-based program for packing and unpacking LHarc
archives.

Affected packages
================
    -------------------------------------------------------------------
     Package       /  Vulnerable  /                         Unaffected
    -------------------------------------------------------------------
  1  app-arch/lha     <= 114i-r3                            >= 114i-r4

==========
The command line argument as well as the archive parsing code of LHa
lack sufficient bounds checking....
Read the Full Advisory
Topics%20covered

Topics Covered

security advisory gentoo buffer overflow command execution arbitrary code normal severity

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory gentoo buffer overflow command execution arbitrary code normal severity

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround