Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as used in products such as Barracuda Spam Firewall, allow remote attackers or local users to execute arbitrary code via long directory or file names in an LHA archive, which triggers the overflow when testing or extracting the archive.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
LHA缓冲区溢出/目录遍历漏洞
Vulnerability Description
LHa是一款基于控制台的解压缩程序。 LHa存在两个缓冲区溢出和两个目录遍历问题，远程攻击者可以利用这些漏洞以进程权限在系统上执行任意指令或破坏系统。 缓冲区溢出发生在测试(t)或者展开(x)操作时，对超长文件名或目录名进行解析时，get_header()函数会发生缓冲区溢出。精心构建文件名或目录名可以进程权限执行任意指令。 另外就是对相对路径没有任何保护，可简单使用LHA建立路径类似"../../../../../etc/cron.d/evil"的压缩包，虽然对绝对路径有保护，但可使用类似"//etc/
CVSS Information
N/A
Vulnerability Type
N/A