Back to CVE Browser

CVE-2004-0745

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0980%

EPSS Percentile2.37th

PublishedSep 28, 2004

Last ModifiedApr 16, 2026

Vulnerability Description

LHA 1.14 and earlier allows attackers to execute arbitrary commands via a directory with shell metacharacters in its name.

Affected Platforms (CPE)

📦

Tsugio Okamoto

Lha

<= 1.14

References & Advisories

🔗 http://www.gentoo.org/security/en/glsa/glsa-200409-13.xml

🔗 http://www.redhat.com/support/errata/RHSA-2004-323.html

🔗 http://www.redhat.com/support/errata/RHSA-2004-440.html

🔗 https://bugzilla.fedora.us/show_bug.cgi?id=1833

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/17198

🔗 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11088

🔗 http://www.gentoo.org/security/en/glsa/glsa-200409-13.xml

🔗 http://www.redhat.com/support/errata/RHSA-2004-323.html

Related Vulnerabilities

CVE-2004-077110.0

Buffer overflow in the extract_one function from lhext.c in LHA may allow attackers to execute arbitrary code via a long w (workin...

CVE-2004-023410.0

Multiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as used in products such as Barracuda S...

CVE-2004-076910.0

Buffer overflow in LHA allows remote attackers to execute arbitrary code via long pathnames in LHarc format 2 headers for a .LHZ a...

CVE-2008-714410.0

Multiple unspecified vulnerabilities in RARLAB WinRAR before 3.71 have unknown impact and attack vectors related to crafted (1) AC...