CVE Kennung:	CVE-2004-0771
Beschreibung:	Buffer overflow in the extract_one function from lhext.c in LHA may allow attackers to execute arbitrary code via a long w (working directory) command line option, a different issue than CVE-2004-0769. NOTE: this issue may be REJECTED if there are not any cases in which LHA is setuid or is otherwise used across security boundaries.
Test Kennungen:	1.3.6.1.4.1.25623.1.0.51166   1.3.6.1.4.1.25623.1.0.52374   1.3.6.1.4.1.25623.1.0.50351   1.3.6.1.4.1.25623.1.0.50401   1.3.6.1.4.1.25623.1.0.51161
Querverweise:	Common Vulnerability Exposure (CVE) ID: CVE-2004-0771 BugTraq ID: 10354 http://www.securityfocus.com/bid/10354 Bugtraq: 20040515 lha buffer overflow(s) again (Google Search) http://www.securityfocus.com/archive/1/363418 Bugtraq: 20040606 Re: [SECURITY] [DSA 515-1] New lha packages fix several (Google Search) http://marc.info/?l=bugtraq&m=108668791510153 https://bugzilla.fedora.us/show_bug.cgi?id=1833 http://www.gentoo.org/security/en/glsa/glsa-200409-13.xml http://bugs.gentoo.org/show_bug.cgi?id=51285 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9595 RedHat Security Advisories: RHSA-2004:323 http://www.redhat.com/support/errata/RHSA-2004-323.html RedHat Security Advisories: RHSA-2004:440 http://www.redhat.com/support/errata/RHSA-2004-440.html XForce ISS Database: lha-extractone-bo(16196) https://exchange.xforce.ibmcloud.com/vulnerabilities/16196