Skip to content
OpenAdvisories
Unscored RHSA-2004:323 4 CVEs

Red Hat Security Advisory: lha security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 8

ReleasePackageFixed in
Red Hat · RHEL 3 enterprise_linux:3::as lha 0:1.14i-10.4
Red Hat · RHEL 3 enterprise_linux:3::as lha-debuginfo 0:1.14i-10.4
Red Hat · RHEL 3 enterprise_linux:3::desktop lha 0:1.14i-10.4
Red Hat · RHEL 3 enterprise_linux:3::desktop lha-debuginfo 0:1.14i-10.4
Red Hat · RHEL 3 enterprise_linux:3::es lha 0:1.14i-10.4
Red Hat · RHEL 3 enterprise_linux:3::es lha-debuginfo 0:1.14i-10.4
Red Hat · RHEL 3 enterprise_linux:3::ws lha 0:1.14i-10.4
Red Hat · RHEL 3 enterprise_linux:3::ws lha-debuginfo 0:1.14i-10.4

Vulnerabilities 4

  • Unscored —
    CVE-2004-0694

    Buffer overflow in LHA 1.14 and earlier allows remote attackers to cause a denial of service (crash) and possibly execu…

  • Unscored —
    CVE-2004-0745

    LHA 1.14 and earlier allows attackers to execute arbitrary commands via a directory with shell metacharacters in its na…

  • Unscored —
    CVE-2004-0769

    Buffer overflow in LHA allows remote attackers to execute arbitrary code via long pathnames in LHarc format 2 headers f…

  • Unscored —
    CVE-2004-0771 Public exploit EPSS 19%

    Buffer overflow in the extract_one function from lhext.c in LHA may allow attackers to execute arbitrary code via a lon…

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • article
    http://marc.theaimsgroup.com/?l=bugtraq&m=108668791510153
  • article
    http://lw.ftw.zamosc.pl/lha-exploit.txt
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=126740
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2004/rhsa-2004_323.json
  • report
    https://access.redhat.com/security/cve/CVE-2004-0694
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617255
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2004-0694
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2004-0694
  • report
    https://access.redhat.com/security/cve/CVE-2004-0745
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617259
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2004-0745
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2004-0745
  • report
    https://access.redhat.com/security/cve/CVE-2004-0769
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617279
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2004-0769
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2004-0769
  • report
    https://access.redhat.com/security/cve/CVE-2004-0771
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617280
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2004-0771
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2004-0771