CVE

Id
9197  
CVE No.
CVE-2004-0769  
Status
Candidate  
Description
Buffer overflow in LHA allows remote attackers to execute arbitrary code via long pathnames in LHarc format 2 headers for a .LHZ archive, as originally demonstrated using the "x" option but also exploitable through "l" and "v", and fixed in header.c, a different issue than CVE-2004-0771.  
Phase
Assigned (20040803)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
60259 9197 CVE-2004-0769 BUGTRAQ:20040616 Re: [SECURITY] [DSA 515-1] New lha packages fix several vulnerabilities; Re:  View
60260 9197 CVE-2004-0769 URL:http://marc.info/?l=bugtraq&m=108745217504379&w=2  View
60261 9197 CVE-2004-0769 MISC:http://lw.ftw.zamosc.pl/lha-exploit.txt  View
60262 9197 CVE-2004-0769 FEDORA:FLSA:1833  View
60263 9197 CVE-2004-0769 URL:https://bugzilla.fedora.us/show_bug.cgi?id=1833  View
60264 9197 CVE-2004-0769 GENTOO:GLSA-200409-13  View
60265 9197 CVE-2004-0769 URL:http://www.gentoo.org/security/en/glsa/glsa-200409-13.xml  View
60266 9197 CVE-2004-0769 REDHAT:RHSA-2004:440  View
60267 9197 CVE-2004-0769 URL:http://www.redhat.com/support/errata/RHSA-2004-440.html  View
60268 9197 CVE-2004-0769 CONFIRM:http://bugs.gentoo.org/show_bug.cgi?id=51285  View
60269 9197 CVE-2004-0769 REDHAT:RHSA-2004:323  View
60270 9197 CVE-2004-0769 URL:http://www.redhat.com/support/errata/RHSA-2004-323.html  View
60271 9197 CVE-2004-0769 OVAL:oval:org.mitre.oval:def:11047  View
60272 9197 CVE-2004-0769 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11047  View
60273 9197 CVE-2004-0769 XF:lha-long-pathname-bo(16917)  View

Related JVN