Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5
CVE-2010-2251
- EPSS 2.42%
- Veröffentlicht 06.07.2010 17:17:13
- Zuletzt bearbeitet 11.04.2025 00:51:21
The get1 command, as used by lftpget, in LFTP before 4.0.6 does not properly validate a server-provided filename before determining the destination filename of a download, which allows remote servers to create or overwrite arbitrary files via a Conte...
6.8
CVE-2007-2348
- EPSS 2.28%
- Veröffentlicht 27.04.2007 18:19:00
- Zuletzt bearbeitet 09.04.2025 00:30:58
mirror --script in lftp before 3.5.9 does not properly quote shell metacharacters, which might allow remote user-assisted attackers to execute shell commands via a malicious script. NOTE: it is not clear whether this issue crosses security boundarie...
7.5
CVE-2003-0963
- EPSS 15.43%
- Veröffentlicht 05.01.2004 05:00:00
- Zuletzt bearbeitet 03.04.2025 01:03:51
Buffer overflows in (1) try_netscape_proxy and (2) try_squid_eplf for lftp 2.6.9 and earlier allow remote HTTP servers to execute arbitrary code via long directory names that are processed by the ls or rels commands.
1