Description
lharc.c in lha does not securely create temporary files, which might allow local users to read or write files by creating a file before LHA is invoked.
References
- 25519 third-party-advisory
- 24336 vdb-entry
- MDKSA-2007:117 vendor-advisory
- lha-lharc-symlink(34063) vdb-entry
- 37049 vdb-entry
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=236585