CVE-2003-0963

2004-01-0505:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2003-0963

buffer overflow

lftp

remote code execution

nvd

security vulnerability

7.3 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.017 Low

EPSS

Percentile

87.9%

JSON

Buffer overflows in (1) try_netscape_proxy and (2) try_squid_eplf for lftp 2.6.9 and earlier allow remote HTTP servers to execute arbitrary code via long directory names that are processed by the ls or rels commands.

CPENameOperatorVersion
alexander_v._lukyanov:lftpalexander v. lukyanov lftpeq2.6.0
alexander_v._lukyanov:lftpalexander v. lukyanov lftpeq2.6.4
alexander_v._lukyanov:lftpalexander v. lukyanov lftpeq2.6.9
alexander_v._lukyanov:lftpalexander v. lukyanov lftpeq2.3
alexander_v._lukyanov:lftpalexander v. lukyanov lftpeq2.6.7
alexander_v._lukyanov:lftpalexander v. lukyanov lftpeq2.5.2
alexander_v._lukyanov:lftpalexander v. lukyanov lftpeq2.4.9
alexander_v._lukyanov:lftpalexander v. lukyanov lftpeq2.6.6
alexander_v._lukyanov:lftpalexander v. lukyanov lftpeq2.6.3
alexander_v._lukyanov:lftpalexander v. lukyanov lftpeq2.6.8

CPE	Name	Operator	Version
alexander_v._lukyanov:lftp	alexander v. lukyanov lftp	eq	2.6.0
alexander_v._lukyanov:lftp	alexander v. lukyanov lftp	eq	2.6.4
alexander_v._lukyanov:lftp	alexander v. lukyanov lftp	eq	2.6.9
alexander_v._lukyanov:lftp	alexander v. lukyanov lftp	eq	2.3
alexander_v._lukyanov:lftp	alexander v. lukyanov lftp	eq	2.6.7
alexander_v._lukyanov:lftp	alexander v. lukyanov lftp	eq	2.5.2
alexander_v._lukyanov:lftp	alexander v. lukyanov lftp	eq	2.4.9
alexander_v._lukyanov:lftp	alexander v. lukyanov lftp	eq	2.6.6
alexander_v._lukyanov:lftp	alexander v. lukyanov lftp	eq	2.6.3
alexander_v._lukyanov:lftp	alexander v. lukyanov lftp	eq	2.6.8