Multiple vulnerabilities have been reported in LHA, which can be exploited by malicious people to compromise a user's system.

1) A vulnerability caused due to boundary errors in the parsing of archives can be exploited using a specially crafted archive to cause a buffer overflow when a user extracts or tests the archive.

Successful exploitation may allow execution of arbitrary code.

2) Some boundary errors in the parsing of command-line arguments can be exploited using a specially crafted command-line argument to cause a buffer overflow.

Successful exploitation may allow execution of arbitrary code.

3) A vulnerability caused due to insufficient validation of shell meta characters in directories can be exploited to inject arbitrary shell commands.

The vulnerabilities have been reported in version 1.14 and prior.

Solution
Do not open untrusted archives.
Further details available to Secunia VIM customers

Provided and/or discovered by
1) Lukasz Wojtow
3) Thomas Biege

Original Advisory
http://rhn.redhat.com/errata/RHSA-2004-323.html

Deep Links
Links available to Secunia VIM customers