CVE:CVE-2004-0235
CNNVD:CNNVD-200408-176
LHa是一款基于控制台的解压缩程序。
LHa存在两个缓冲区溢出和两个目录遍历问题，远程攻击者可以利用这些漏洞以进程权限在系统上执行任意指令或破坏系统。
缓冲区溢出发生在测试(t)或者展开(x)操作时，对超长文件名或目录名进行解析时，get_header()函数会发生缓冲区溢出。精心构建文件名或目录名可以进程权限执行任意指令。
另外就是对相对路径没有任何保护，可简单使用LHA建立路径类似"../../../../../etc/cron.d/evil"的压缩包，虽然对绝对路径有保护，但可使用类似"//etc/cron.d/evil"的路径形式绕过。攻击者可以构建简单包当LHA操作时破坏系统文件。
solution:Upgrade clearswift mailsweeper to a higher version than 4.0,4.1,4.2,4.3,4.3.3,4.3.4,4.3.5,4.3.6,4.3.6_sp1,4.3.7,4.3.8,4.3.10,4.3.11,4.3.13,and avoid the version 4.0,4.1,4.2,4.3,4.3.3,4.3.4,4.3.5,4.3.6,4.3.6_sp1,4.3.7,4.3.8,4.3.10,4.3.11,4.3.13; Upgrade f-secure f-secure_anti-virus to a higher version than 4.51,4.52,4.60,5.5,5.41,5.42,5.52,6.21,2003,2004,and avoid the version 4.51,4.52,4.60,5.5,5.41,5.42,5.52,6.21,2003,2004; Upgrade f-secure f-secure_for_firewalls to a higher version than 6.20,and avoid the version 6.20; Upgrade f-secure f-secure_internet_security to a higher version than 2003,2004,and avoid the version 2003,2004; Upgrade f-secure f-secure_personal_express to a higher version than 4.5,4.6,4.7,and avoid the version 4.5,4.6,4.7; Upgrade f-secure internet_gatekeeper to a higher version than 6.31,6.32,and avoid the version 6.31,6.32; Upgrade rarlab winrar to a higher version than 3.20,and avoid the version 3.20; Upgrade redhat lha to a higher version than 1.14i-9,and avoid the version 1.14i-9; Upgrade sgi propack to a higher version than 2.4,3.0,and avoid the version 2.4,3.0; Upgrade stalker cgpmcafee to a higher version than 3.2,and avoid the version 3.2; Upgrade tsugio_okamoto lha to a higher version than 1.14,1.15,1.17,and avoid the version 1.14,1.15,1.17; Upgrade winzip winzip to a higher version than 9.0,and avoid the version 9.0; Upgrade redhat fedora_core to a higher version than core_1.0,and avoid the version core_1.0