SUSE CVE-2004-0771

Buffer overflow in the extractone function from lhext.c in LHA may allow attackers to execute arbitrary code via a long w working directory command line option, a different issue than CVE-2004-0769. NOTE: this issue may be REJECTED if there are not any cases in which LHA is setuid or is otherwise...

LHA 1.x - 'extract_one' Multiple Buffer Overflow Vulnerabilities

//source: https://www.securityfocus.com/bid/10354/info // //LHA has been reported prone to multiple vulnerabilities that may allow a malicious archive to execute arbitrary code or corrupt arbitrary files when the archive is operated on. These issues are triggered in the 'extractone' and are due t...

lha buffer overflow(s) again

i posted it yesterday to [email protected] but mailbox is disabled for that recipient :-/ Date: Sat, 15 May 2004 00:24:09 +0200 CEST From: Lukasz Wojtow [email protected] To: [email protected] Subject: LHA buffer overflow not the last one already fixed it seems that lha is quite poorly written...