Bugtraq mailing list archives
lha buffer overflow(s) again
From: <lw () wszia edu pl>
Date: 15 May 2004 11:09:00 -0000
i posted it yesterday to bugs () redhat com but mailbox is disabled for that recipient :-/ Date: Sat, 15 May 2004 00:24:09 +0200 (CEST) From: Lukasz Wojtow <gnz () student wszia edu pl> To: bugs () redhat com Subject: LHA buffer overflow (not the last one already fixed) it seems that lha is quite poorly written. after your last advisory, i decided to take a look at the code and found 2 BO in function extract_one (file lhext.c): if (extract_directory) sprintf(name, "%s/%s", extract_directory, q); else strcpy(name, q); i bet there is more... Regards Lukasz Wojtow
Current thread:
- lha buffer overflow(s) again lw (May 15)