SecurityTracker.com
    Home    |    View Topics    |    Search    |    Contact Us    |   

SecurityTracker
Archives


 


Category:   Application (Generic)  >   lha Vendors:   [Multiple Authors/Vendors]
lha Buffer Overflows Let Remote Users Create Malicious Archives to Execute Arbitrary Code
SecurityTracker Alert ID:  1009994
SecurityTracker URL:  http://securitytracker.com/id/1009994
CVE Reference:   CVE-2004-0234, CVE-2004-0235   (Links to External Site)
Date:  Apr 30 2004
Impact:   Execution of arbitrary code via network, Modification of system information, Modification of user information, User access via network


Description:   Several vulnerabilities were reported in the 'lha' LHarc archive processor. A remote user can create a malicious archive that will execute arbitrary code or write files to other directories on the system.

Red Hat reported that there are two stack buffer overflows and two directory traversal flaws in LHA.

A remote user can create a specially crafted LHA archive that, when loaded by the target user, will execute arbitrary code on the target user's system.

A remote user can also create a specially crafted LHA archive that, when expanded by the target user, will create files on the target user's system in a location outside of the current directory.

Ulf Harnhammar is credited with discovering these flaws.

Impact:   A remote user can create an archive that, when processed by a target user, will execute arbitrary code on the target user's system with the privileges of the target user or will create files on the target user's system that are located outside of the expected directory.
Solution:   No upstream solution was available at the time of this entry.

[Editor's note: Red Hat has issued a fix. See the Message History for a separate Alert regarding the Red Hat fix.]

Cause:   Access control error, Boundary error, Input validation error
Underlying OS:  Linux (Any), UNIX (Any)

Message History:   This archive entry has one or more follow-up message(s) listed below.
Apr 30 2004 (Red Hat Issues Fix for RH Linux) lha Buffer Overflows Let Remote Users Create Malicious Archives to Execute Arbitrary Code
Red Hat has released a fix for Red Hat Linux 9.
May 5 2004 (Slackware Issues Fix) lha Buffer Overflows Let Remote Users Create Malicious Archives to Execute Arbitrary Code
Slackware has released a fix.
May 6 2004 (Conectiva Issues Fix) lha Buffer Overflows Let Remote Users Create Malicious Archives to Execute Arbitrary Code
Conectiva has released a fix.
May 10 2004 (Gentoo Issues Fix) lha Buffer Overflows Let Remote Users Create Malicious Archives to Execute Arbitrary Code
Gentoo has released a fix.
May 18 2004 (Fedora Issues Fix) lha Buffer Overflows Let Remote Users Create Malicious Archives to Execute Arbitrary Code
Fedora has released a fix.
May 27 2004 (Red Hat Issues Fix for RH Enterprise Linux) lha Buffer Overflows Let Remote Users Create Malicious Archives to Execute Arbitrary Code
Red Hat has released a fix for Red Hat Enterprise Linux 2.1 and 3.



 Source Message Contents

Subject:  CVE-2004-0234, CVE-2004-0235


CVE: CAN-2004-0234, CAN-2004-0235

Red Hat reported that there are two stack buffer overflows and two directory traversal 
flaws in LHA.  A remote user can create a specially crafted LHA archive that, when loaded 
by the target user, will execute arbitrary code on the target user's system.

Ulf Harnhammar is credited with discovering this flaw.


 
 


Go to the Top of This SecurityTracker Archive Page





Home   |    View Topics   |    Search   |    Contact Us

This web site uses cookies for web analytics. Learn More

Copyright 2022, SecurityGlobal.net LLC