CentOS Update for lftp CESA-2009:1278 centos5 i386

# SPDX-FileCopyrightText: 2011 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only

if(description)
{
  script_xref(name:"URL", value:"http://lists.centos.org/pipermail/centos-announce/2009-September/016139.html");
  script_oid("1.3.6.1.4.1.25623.1.0.880878");
  script_version("2026-04-24T06:23:04+0000");
  script_tag(name:"last_modification", value:"2026-04-24 06:23:04 +0000 (Fri, 24 Apr 2026)");
  script_tag(name:"creation_date", value:"2011-08-09 08:20:34 +0200 (Tue, 09 Aug 2011)");
  script_tag(name:"cvss_base", value:"6.8");
  script_tag(name:"cvss_base_vector", value:"AV:N/AC:M/Au:N/C:P/I:P/A:P");
  script_xref(name:"CESA", value:"2009:1278");
  script_cve_id("CVE-2007-2348");
  script_name("CentOS Update for lftp CESA-2009:1278 centos5 i386");

  script_tag(name:"summary", value:"The remote host is missing an update for the 'lftp'
  package(s) announced via the referenced advisory.");
  script_category(ACT_GATHER_INFO);
  script_copyright("Copyright (C) 2011 Greenbone AG");
  script_family("CentOS Local Security Checks");
  script_dependencies("gather-package-list.nasl");
  script_mandatory_keys("ssh/login/centos", "ssh/login/rpms", re:"ssh/login/release=CentOS5");
  script_tag(name:"affected", value:"lftp on CentOS 5");
  script_tag(name:"insight", value:"LFTP is a sophisticated file transfer program for the FTP and HTTP
  protocols. Like bash, it has job control and uses the readline library for
  input. It has bookmarks, built-in mirroring, and can transfer several files
  in parallel. It is designed with reliability in mind.

  It was discovered that lftp did not properly escape shell metacharacters
  when generating shell scripts using the 'mirror --script' command. A
  mirroring script generated to download files from a malicious FTP server
  could allow an attacker controlling the FTP server to run an arbitrary
  command as the user running lftp. (CVE-2007-2348)

  This update also fixes the following bugs:

  * when using the 'mirror' or 'get' commands with the '-c' option, lftp did
  not check for some specific conditions that could result in the program
  becoming unresponsive, hanging and the command not completing. For example,
  when waiting for a directory listing, if lftp received a '226' message,
  denoting an empty directory, it previously ignored the message and kept
  waiting. With this update, these conditions are properly checked for and
  lftp no longer hangs when '-c' is used with 'mirror' or 'get'. (BZ#422881)

  * when using the 'put', 'mput' or 'reput' commands over a Secure FTP (SFTP)
  connection, specifying the '-c' option sometimes resulted in corrupted
  files of incorrect size. With this update, using these commands over SFTP
  with the '-c' option works as expected, and transferred files are no
  longer corrupted in the transfer process. (BZ#434294)

  * previously, LFTP linked to the OpenSSL library. OpenSSL's license is,
  however, incompatible with LFTP's GNU GPL license and LFTP does not include
  an exception allowing OpenSSL linking. With this update, LFTP links to the
  GnuTLS (GNU Transport Layer Security) library, which is released under the
  GNU LGPL license. Like OpenSSL, GnuTLS implements the SSL and TLS
  protocols, so functionality has not changed. (BZ#458777)

  * running 'help mirror' from within lftp only presented a sub-set of the
  available options compared to the full list presented in the man page. With
  this update, running 'help mirror' in lftp presents the same list of mirror
  options as is available in the Commands section of the lftp man page.
  (BZ#461922)

  * LFTP imports gnu-lib from upstream. Subsequent to gnu-lib switching from
  GNU GPLv2 to GNU GPLv3, the LFTP license was internally inconsistent, with
  LFTP licensed a ...

  Description truncated, please see the referenced URL(s) for more information.");
  script_tag(name:"solution", value:"Please install the updated packages.");
  script_tag(name:"qod_type", value:"package");
  script_tag(name:"solution_type", value:"VendorFix");
  exit(0);
}

include("revisions-lib.inc");
include("pkg-lib-rpm.inc");

release = rpm_get_ssh_release();
if(!release)
  exit(0);

res = "";

if(release == "CentOS5")
{

  if ((res = isrpmvuln(pkg:"lftp", rpm:"lftp~3.7.11~4.el5", rls:"CentOS5")) != NULL)
  {
    security_message(data:res);
    exit(0);
  }

  if (__pkg_match) exit(99);
  exit(0);
}