OSVDB ID: 5753

Title: LHA get_header() Function File / Directory Name Handling Overflow

Info

Disclosure
May 01, 2004

Discovery
Unknown

Dates

Exploit
May 01, 2004

Solution
Unknown

Description

 A remote overflow exists in LHA. The get_header() function fails to perform proper bounds checking resulting in a buffer overflow. By sending an LHA archive containing files with overly long file or directory names, a remote attacker can cause arbitrary code execution resulting in a loss of integrity.

Classification

 Location: Remote / Network Access
Attack Type: Input Manipulation
Impact: Loss of Integrity
Exploit: Exploit Public
Disclosure: OSVDB Verified

Solution

 Currently, there are no known workarounds or upgrades to correct this issue. Consult your vendor for an appropriate patch. On June 06, 2004, Lukasz Wojtow demonstrated that the initial patch did not mitigate this vulnerability. Ensure you have the latest vendor patch available.

Products

Mr. S.K.

LHA

 1.14d
1.14e
1.14f
1.14g
1.14h
1.14i
1.17

References

Credit
  • Ulf Harnhammar - metaurprontomail.com -


Direct URL: http://osvdb.org/5753