Red Hat Security Advisory

RHSA-2009:1278

lftp security and bug fix update

Released 2009-09-02 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat Enterprise Linux (v. 5 server) lftp-3.7.11-4.el5, lftp-3.7.11-4.el5.i386, lftp-3.7.11-4.el5.ia64 +1
Red Hat Enterprise Linux Desktop (v. 5 client) lftp-3.7.11-4.el5, lftp-3.7.11-4.el5.i386

Fixes 1 record

TI-2007-02266 CVE-2007-2348 · GHSA-m4hr-2hrx-m38c

mirror --script in lftp before 3.5.9 does not properly quote shell metacharacters, which…

LOW 36

mirror --script in lftp before 3.5.9 does not properly quote shell metacharacters, which might allow remote user-assisted attackers to execute shell commands via a malicious script.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.03175 Published 2007-04-27 Partial fix