CVE-2004-0745: Critical severity Tsugio Okamoto Lha vulnerability
Published Sep 10, 2004
·Updated
LHA 1.14 and earlier allows attackers to execute arbitrary commands via a directory with shell metacharacters in its name.
Affected Software
1 affected component
Tsugio Okamoto Lha<=1.14
Remediation
Patch Available
Event History
Sep 10, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-0745?
CVE-2004-0745 is classified as a critical vulnerability due to its potential to allow arbitrary command execution.
2
How do I fix CVE-2004-0745?
To fix CVE-2004-0745, upgrade to LHA version 1.15 or later.
3
What are the implications of CVE-2004-0745?
The implications of CVE-2004-0745 include potential unauthorized access and execution of commands on the affected system.
4
Who is affected by CVE-2004-0745?
CVE-2004-0745 affects users of LHA versions 1.14 and earlier.
5
Can I mitigate CVE-2004-0745 without upgrading?
Mitigation options for CVE-2004-0745 are limited, and the safest approach is to upgrade the software.