Lucene search

K
freebsdFreeBSDA2FFB627-9C53-11D8-9366-0020ED76EF5A
HistoryApr 29, 2004 - 12:00 a.m.

lha buffer overflows and path traversal issues

2004-04-2900:00:00
vuxml.freebsd.org
10

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.934 High

EPSS

Percentile

99.1%

Ulf Härnhammar discovered several vulnerabilities in
LHa for UNIX’s path name handling code. Specially constructed
archive files may cause LHa to overwrite files or
execute arbitrary code with the privileges of the user
invoking LHa. This could be particularly harmful for
automated systems that might handle archives such as
virus scanning processes.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchlha< 1.14i_4UNKNOWN

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.934 High

EPSS

Percentile

99.1%