CVE-2007-2030: lharc.c in lha does not securely create temporary files, which might allow local users to read or write fil...

Security readout for executives and security teams

CVE-2007-2030 is a local file-handling weakness in lha. When LHA creates temporary files insecurely, another local user may be able to pre-create the expected file and influence reads or writes. The business risk is mainly on shared or multi-user systems where lha is installed or invoked by privileged automation. Exposure is most plausible on legacy Unix/Linux systems with the lha package installed, especially shared hosts or scripts that invoke LHA. The source bundle references Mandriva and Red Hat tracking, but affected versions are not enumerated here. Handle as a legacy hygiene issue with moderate urgency. It is not supported as remotely exploitable or actively exploited here, but shared systems using lha should be checked and remediated during patch review. Mitigation focus: Check current vendor package guidance for lha on supported distributions.; Update or remove lha where vendor fixes or replacements are available.; Avoid privileged or automated LHA execution on untrusted archives until assessed..

Prepared

Jun 29, 2026, 06:10 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.