CVE-2004-0694
Buffer overflow in LHA 1.14 and earlier allows remote attackers to cause a denial of service ...
CVE-2004-0694 is a medium vulnerability (CVSS 6.8) in Tsugio Okamoto Lha, published February 4, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.55%, the 85th percentile. No source names a fixed version.
- Severity
- 6.8 MediumCVSS 2.0, NVD
- Exploit chance
- 2.55%EPSS, 85th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Buffer overflow in LHA 1.14 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors related to "command line processing," a different vulnerability than CVE-2004-0771. NOTE: this issue may be REJECTED if there are not any cases in which LHA is setuid or is otherwise used across security boundaries.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
lhaRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs | before 0:1.14i-10.4 | 0:1.14i-10.4 |
lha-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs | before 0:1.14i-10.4 | 0:1.14i-10.4 |
lhaRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs | before 0:1.14i-10.4 | 0:1.14i-10.4 |
lha-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs | before 0:1.14i-10.4 | 0:1.14i-10.4 |
lhaRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs | before 0:1.14i-10.4 | 0:1.14i-10.4 |
lha-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs | before 0:1.14i-10.4 | 0:1.14i-10.4 |
lhaRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs | before 0:1.14i-10.4 | 0:1.14i-10.4 |
lha-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs | before 0:1.14i-10.4 | 0:1.14i-10.4 |
What each source reports
NVD Score used
Buffer overflow in LHA 1.14 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors related to "command line processing," a different vulnerability than CVE-2004-0771. NOTE: this issue may be REJECTED if there are not any cases in which LHA is setuid or is otherwise used across security boundaries.
- Record
CVE-2004-0694- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE ListNo score
Buffer overflow in LHA 1.14 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors related to "command line processing," a different vulnerability than CVE-2004-0771. NOTE: this issue may be REJECTED if there are not any cases in which LHA is setuid or is otherwise used across security boundaries.
- Record
CVE-2004-0694- Updated
- 2026-11-02
EUVDEUVD-2004-0693No score
Buffer overflow in LHA 1.14 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors related to "command line processing," a different vulnerability than CVE-2004-0771. NOTE: this issue may be REJECTED if there are not any cases in which LHA is setuid or is otherwise used across security boundaries.
- Record
EUVD-2004-0693- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6446-v6gj-7jm6No score
Buffer overflow in LHA 1.14 and earlier allows remote attackers to cause a denial of service ...
Buffer overflow in LHA 1.14 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors related to "command line processing," a different vulnerability than CVE-2004-0771. NOTE: this issue may be REJECTED if there are not any cases in which LHA is setuid or is otherwise used across security boundaries.
- Record
GHSA-6446-v6gj-7jm6- Weakness
- CWE-119
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
redhat.com/support/errata/RHSA-2004-323.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9981
nvd.nist.gov/vuln/detail/CVE-2004-0694
github.com/advisories/GHSA-6446-v6gj-7jm6
access.redhat.com/errata/RHSA-2004:323
Show 20 moreShow less
marc.theaimsgroup.com?l=bugtraq&m=108668791510153
lw.ftw.zamosc.pl/lha-exploit.txt
bugzilla.redhat.com/show_bug.cgi?id=126740
security.access.redhat.com/data/csaf/v2/advisories/2004/rhsa-2004_323.json
cve.org/CVERecord?id=CVE-2004-0694