Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2004-0745 | First vendor Publication | 2004-09-28 |
| Vendor | Cve | Last vendor Modification | 2024-11-20 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:L/Au:N/C:C/I:C/A:C) | |||
|---|---|---|---|
| Cvss Base Score | 10 | Attack Range | Network |
| Cvss Impact Score | 10 | Attack Complexity | Low |
| Cvss Expoit Score | 10 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| LHA 1.14 and earlier allows attackers to execute arbitrary commands via a directory with shell metacharacters in its name. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0745 |
OVAL Definitions
| Definition Id: oval:org.mitre.oval:def:11088 | |||
| Oval ID: | oval:org.mitre.oval:def:11088 | ||
| Title: | LHA 1.14 and earlier allows attackers to execute arbitrary commands via a directory with shell metacharacters in its name. | ||
| Description: | LHA 1.14 and earlier allows attackers to execute arbitrary commands via a directory with shell metacharacters in its name. | ||
| Family: | unix | Class: | vulnerability |
| Reference(s): | CVE-2004-0745 | Version: | 5 |
| Platform(s): | Red Hat Enterprise Linux 3 CentOS Linux 3 | Product(s): | |
| Definition Synopsis: | |||
CPE : Common Platform Enumeration
| Type | Description | Count |
|---|---|---|
| Application | 1 |
OpenVAS Exploits
| Date | Description |
|---|---|
| 2008-09-24 | Name : Gentoo Security Advisory GLSA 200409-13 (lha) File : nvt/glsa_200409_13.nasl |
| 2008-09-04 | Name : FreeBSD Ports: lha File : nvt/freebsd_lha.nasl |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 9522 | LHA Directory Shell Metacharacter Command Execution LHA contains a flaw that may allow a malicious user to execute arbitrary commands. The issue exists because LHA doesn't properly filter directory names that contain shell meta characters. It is possible that the flaw may allow an attacker to use specially crafted directory names to execute arbitrary commands resulting in a loss of integrity. |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2009-04-23 | Name : The remote FreeBSD host is missing a security-related update. File : freebsd_pkg_273cc1a30d6b11d98a8a000c41e2cdad.nasl - Type : ACT_GATHER_INFO |
| 2004-09-09 | Name : The remote Fedora Core host is missing a security update. File : fedora_2004-294.nasl - Type : ACT_GATHER_INFO |
| 2004-09-09 | Name : The remote Fedora Core host is missing a security update. File : fedora_2004-295.nasl - Type : ACT_GATHER_INFO |
| 2004-09-09 | Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-200409-13.nasl - Type : ACT_GATHER_INFO |
| 2004-09-09 | Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2004-440.nasl - Type : ACT_GATHER_INFO |
| 2004-09-01 | Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2004-323.nasl - Type : ACT_GATHER_INFO |
Sources (Detail)
Alert History
| Date | Informations |
|---|---|
| 2024-11-28 23:22:57 |
|
| 2024-11-28 12:06:11 |
|
| 2021-05-04 12:02:23 |
|
| 2021-04-22 01:02:32 |
|
| 2020-05-23 01:36:06 |
|
| 2020-05-23 00:15:51 |
|
| 2017-10-11 09:23:22 |
|
| 2017-07-11 12:01:29 |
|
| 2016-04-26 12:52:47 |
|
| 2014-02-17 10:27:53 |
|
| 2013-05-11 11:42:36 |
|
