CVE

Id
9199  
CVE No.
CVE-2004-0771  
Status
Candidate  
Description
Buffer overflow in the extract_one function from lhext.c in LHA may allow attackers to execute arbitrary code via a long w (working directory) command line option, a different issue than CVE-2004-0769. NOTE: this issue may be REJECTED if there are not any cases in which LHA is setuid or is otherwise used across security boundaries.  
Phase
Assigned (20040804)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
60280 9199 CVE-2004-0771 BUGTRAQ:20040515 lha buffer overflow(s) again  View
60281 9199 CVE-2004-0771 URL:http://www.securityfocus.com/archive/1/363418  View
60282 9199 CVE-2004-0771 BUGTRAQ:20040606 Re: [SECURITY] [DSA 515-1] New lha packages fix several  View
60283 9199 CVE-2004-0771 URL:http://marc.info/?l=bugtraq&m=108668791510153  View
60284 9199 CVE-2004-0771 MISC:http://bugs.gentoo.org/show_bug.cgi?id=51285  View
60285 9199 CVE-2004-0771 FEDORA:FLSA:1833  View
60286 9199 CVE-2004-0771 URL:https://bugzilla.fedora.us/show_bug.cgi?id=1833  View
60287 9199 CVE-2004-0771 GENTOO:GLSA-200409-13  View
60288 9199 CVE-2004-0771 URL:http://www.gentoo.org/security/en/glsa/glsa-200409-13.xml  View
60289 9199 CVE-2004-0771 REDHAT:RHSA-2004:440  View
60290 9199 CVE-2004-0771 URL:http://www.redhat.com/support/errata/RHSA-2004-440.html  View
60291 9199 CVE-2004-0771 REDHAT:RHSA-2004:323  View
60292 9199 CVE-2004-0771 URL:http://www.redhat.com/support/errata/RHSA-2004-323.html  View
60293 9199 CVE-2004-0771 OVAL:oval:org.mitre.oval:def:9595  View
60294 9199 CVE-2004-0771 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9595  View
60295 9199 CVE-2004-0771 XF:lha-extractone-bo(16196)  View
60296 9199 CVE-2004-0771 URL:http://xforce.iss.net/xforce/xfdb/16196  View
60297 9199 CVE-2004-0771 BID:10354  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63008 JVNDB-2004-000350 MIT Kerberos の krb524d デーモンにおけるメモリ二重開放の脆弱性 MIT krb5 に同梱される krb524d デーモン、および Kerberos 4 Cross-Realm 認証を無効化するパッチを適用した krb5 1.2.8 未満の krb524d デーモンには、メモリ二重開放の脆弱性が存在します。 CVE-2004-0772 9199 7.5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000350.html  View