Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2003-0963
HistoryJan 05, 2004 - 5:00 a.m.

CVE-2003-0963

2004-01-0505:00:00
[email protected]
web.nvd.nist.gov
3

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.4

Confidence

Low

EPSS

0.017

Percentile

88.0%

JSON

Buffer overflows in (1) try_netscape_proxy and (2) try_squid_eplf for lftp 2.6.9 and earlier allow remote HTTP servers to execute arbitrary code via long directory names that are processed by the ls or rels commands.

Affected configurations

Nvd
Node
alexander_v._lukyanovlftpMatch2.3
OR
alexander_v._lukyanovlftpMatch2.4.9
OR
alexander_v._lukyanovlftpMatch2.5.2
OR
alexander_v._lukyanovlftpMatch2.6.0
OR
alexander_v._lukyanovlftpMatch2.6.3
OR
alexander_v._lukyanovlftpMatch2.6.4
OR
alexander_v._lukyanovlftpMatch2.6.5
OR
alexander_v._lukyanovlftpMatch2.6.6
OR
alexander_v._lukyanovlftpMatch2.6.7
OR
alexander_v._lukyanovlftpMatch2.6.8
OR
alexander_v._lukyanovlftpMatch2.6.9
VendorProductVersionCPE
alexander_v._lukyanovlftp2.3cpe:2.3:a:alexander_v._lukyanov:lftp:2.3:*:*:*:*:*:*:*
alexander_v._lukyanovlftp2.4.9cpe:2.3:a:alexander_v._lukyanov:lftp:2.4.9:*:*:*:*:*:*:*
alexander_v._lukyanovlftp2.5.2cpe:2.3:a:alexander_v._lukyanov:lftp:2.5.2:*:*:*:*:*:*:*
alexander_v._lukyanovlftp2.6.0cpe:2.3:a:alexander_v._lukyanov:lftp:2.6.0:*:*:*:*:*:*:*
alexander_v._lukyanovlftp2.6.3cpe:2.3:a:alexander_v._lukyanov:lftp:2.6.3:*:*:*:*:*:*:*
alexander_v._lukyanovlftp2.6.4cpe:2.3:a:alexander_v._lukyanov:lftp:2.6.4:*:*:*:*:*:*:*
alexander_v._lukyanovlftp2.6.5cpe:2.3:a:alexander_v._lukyanov:lftp:2.6.5:*:*:*:*:*:*:*
alexander_v._lukyanovlftp2.6.6cpe:2.3:a:alexander_v._lukyanov:lftp:2.6.6:*:*:*:*:*:*:*
alexander_v._lukyanovlftp2.6.7cpe:2.3:a:alexander_v._lukyanov:lftp:2.6.7:*:*:*:*:*:*:*
alexander_v._lukyanovlftp2.6.8cpe:2.3:a:alexander_v._lukyanov:lftp:2.6.8:*:*:*:*:*:*:*
Rows per page:
1-10 of 111

Related

freebsd 1
openvas 4
nessus 6
redhat 1
suse 1
debian 2
cve 1
debiancve 1
osv 1
exploitdb 1
cvelist 1
freebsd
freebsd
lftp HTML parsing vulnerability
2003-12-11 00:00:00
openvas
openvas
FreeBSD Ports: lftp
2008-09-04 00:00:00
FreeBSD Ports: lftp
2008-09-04 00:00:00
Debian: Security Advisory (DSA-406)
2008-01-17 00:00:00
nessus
nessus
Mandrake Linux Security Advisory : lftp (MDKSA-2003:116)
2004-07-31 00:00:00
Debian DSA-406-1 : lftp - buffer overflow
2004-09-29 00:00:00
FreeBSD : lftp HTML parsing vulnerability (89)
2004-07-06 00:00:00
redhat
redhat
(RHSA-2003:404) lftp security update
2003-12-16 00:00:00
suse
suse
remote system compromise in lftp
2003-12-15 13:35:24
debian
debian
[SECURITY] [DSA 406-1] New lftp packages fix arbitrary code execution
2004-01-05 06:50:23
[SECURITY] [DSA 406-1] New lftp packages fix arbitrary code execution
2004-01-05 06:50:23
cve
cve
CVE-2003-0963
2004-01-05 05:00:00
debiancve
debiancve
CVE-2003-0963
2004-01-05 05:00:00
osv
osv
lftp - buffer overflow
2004-01-05 00:00:00
exploitdb
exploitdb
lftp 2.6.9 - Remote Stack Overflow
2004-01-14 00:00:00
cvelist
cvelist
CVE-2003-0963
2003-12-17 05:00:00

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.4

Confidence

Low

EPSS

0.017

Percentile

88.0%

JSON
Related for NVD:CVE-2003-0963
freebsd1openvas4nessus6redhat1suse1debian2cve1debiancve1osv1exploitdb1cvelist1