Description
Buffer overflow in LHA allows remote attackers to execute arbitrary code via long pathnames in LHarc format 2 headers for a .LHZ archive, as originally demonstrated using the "x" option but also exploitable through "l" and "v", and fixed in header.c, a different issue than CVE-2004-0771.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 3 | lha | 1.14i-10.4 | RHSA-2004:323 |
Advisories 1
- RHSA-2004:323 Red Hat Security Advisory: lha security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- RHSA-2004:323 vendor-advisory
- oval:org.mitre.oval:def:11047 vdb-entry signature
- FLSA:1833 vendor-advisory
- lha-long-pathname-bo(16917) vdb-entry
- http://bugs.gentoo.org/show_bug.cgi?id=51285
- GLSA-200409-13 vendor-advisory
- http://lw.ftw.zamosc.pl/lha-exploit.txt
- 20040616 Re: [SECURITY] [DSA 515-1] New lha packages fix several vulnerabilities; Re: mailing-list
- RHSA-2004:440 vendor-advisory