Test ID:	1.3.6.1.4.1.25623.1.0.54562
Category:	Gentoo Local Security Checks
Title:	Gentoo Security Advisory GLSA 200405-02 (lha)
Summary:	Gentoo Security Advisory GLSA 200405-02 (lha)
Description:	The remote host is missing updates announced in advisory GLSA 200405-02. Two stack-based buffer overflows and two directory traversal problems have been found in LHa. These vulnerabilities can be used to execute arbitrary code or as a denial of service attack. Solution: All users of LHa should upgrade to the latest stable version: # emerge sync # emerge -pv '>=app-arch/lha-114i-r2' # emerge '>=app-arch/lha-114i-r2' http://www.securityspace.com/smysecure/catid.html?in=GLSA%20200405-02 http://bugs.gentoo.org/show_bug.cgi?id=49961
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2004-0234 http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/020776.html http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/020778.html Bugtraq: 20040510 [Ulf Harnhammar]: LHA Advisory + Patch (Google Search) http://marc.theaimsgroup.com/?l=bugtraq&m=108422737918885&w=2 Bugtraq: 20060403 Barracuda LHA archiver security bug leads to remote compromise (Google Search) http://archives.neohapsis.com/archives/bugtraq/2006-04/0059.html http://www.guay-leroux.com/projects/barracuda-advisory-LHA.txt Conectiva Linux advisory: CLA-2004:840 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000840 Debian Security Information: DSA-515 (Google Search) http://www.debian.org/security/2004/dsa-515 https://bugzilla.fedora.us/show_bug.cgi?id=1833 http://www.redhat.com/support/errata/RHSA-2004-178.html http://www.redhat.com/support/errata/RHSA-2004-179.html http://security.gentoo.org/glsa/glsa-200405-02.xml http://www.redhat.com/archives/fedora-announce-list/2004-May/msg00005.html BugTraq ID: 10243 http://www.securityfocus.com/bid/10243 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9881 http://www.vupen.com/english/advisories/2006/1220 http://www.osvdb.org/5753 http://www.osvdb.org/5754 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:977 http://securitytracker.com/id?1015866 http://secunia.com/advisories/19514 XForce ISS Database: lha-multiple-bo(16012) http://xforce.iss.net/xforce/xfdb/16012 Common Vulnerability Exposure (CVE) ID: CVE-2004-0235 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10409 XForce ISS Database: lha-directory-traversal(16013) http://xforce.iss.net/xforce/xfdb/16013 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:978
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 32582 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.

New User Registration Email: UserID: Passwd: Please email me your monthly newsletters, informing the latest services, improvements & surveys. Please email me a vulnerability test announcement whenever a new test is added.     Privacy

Registered User Login   UserID:     Passwd:     Forgot userid or passwd? Email/Userid: