Red Hat Security Advisory

RHSA-2010:0585

lftp security update

Released 2010-08-02 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux (v. 5 server) lftp-3.7.11-4.el5_5.3, lftp-3.7.11-4.el5_5.3.i386, lftp-3.7.11-4.el5_5.3.ia64 +1
Red Hat Enterprise Linux Desktop (v. 5 client) lftp-3.7.11-4.el5_5.3, lftp-3.7.11-4.el5_5.3.i386

Fixes 1 record

TI-2010-02160 CVE-2010-2251 · GHSA-96vc-4h75-gh5j

The get1 command, as used by lftpget, in LFTP before 4.0.6 does not properly validate a…

LOW 39

The get1 command, as used by lftpget, in LFTP before 4.0.6 does not properly validate a server-provided filename before determining the destination filename of a download, which allows remote servers to create or overwri…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03629 Published 2010-07-06 Fixed CWE-20