Mandriva Linux Security Advisory – lharc.c in lha does not securely create temporary files, which might allow local users to read or write files by creating a file before LHA is invoked.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/57082/MDKSA-2007-117.txt
Source: https://packetstormsecurity.com/files/57082/Mandriva-Linux-Security-Advisory-2007.117.html