lftp security update

CentOS Errata and Security Advisory CESA-2020:1045 An update for lftp is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

lftp security update

4.4.8-12 - Resolves: 1611641 - CVE-2018-10916 lftp: particular remote file names may lead to current working directory erased...

Unauthorized Removal Of Working Directory

lftp is vulnerable to Unauthorized Removal of Working Directory. A particular remote file names may lead to current working directory erased...

RHEL 7 : lftp (RHSA-2020:1045)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:1045 advisory. LFTP is a file transfer utility for File Transfer Protocol FTP, Secure File Transfer Protocol SFTP, Hypertext Transfer Protocol HTTP, and other...

lftp: particular remote file names may lead to current working directory erased

It has been discovered that lftp does not properly sanitize remote file names, leading to a loss of integrity on the local system when reverse mirroring is used. A remote attacker may trick a user to use reverse mirroring on an attacker-controlled FTP server, resulting in the removal of all files...

Moderate: Red Hat Security Advisory: lftp security update

An update for lftp is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

EulerOS Virtualization for ARM 64 3.0.2.0 : lftp (EulerOS-SA-2020-1259)

According to the version of the lftp package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - It has been discovered that lftp up to and including version 4.8.3 does not properly sanitize remote file names, leading to ...

Huawei EulerOS: Security Advisory for lftp (EulerOS-SA-2020-1259)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for lftp (EulerOS-SA-2019-2485)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for lftp (EulerOS-SA-2019-2165)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for lftp (EulerOS-SA-2019-2603)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP3 : lftp (EulerOS-SA-2019-2603)

According to the version of the lftp package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - It has been discovered that lftp up to and including version 4.8.3 does not properly sanitize remote file names, leading to a loss of integrity on the...

EulerOS 2.0 SP2 : lftp (EulerOS-SA-2019-2485)

According to the version of the lftp package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - It has been discovered that lftp up to and including version 4.8.3 does not properly sanitize remote file names, leading to a loss of integrity on the...

EulerOS 2.0 SP5 : lftp (EulerOS-SA-2019-2165)

According to the version of the lftp package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - It has been discovered that lftp up to and including version 4.8.3 does not properly sanitize remote file names, leading to a loss of integrity on the...

The vulnerability of the console-based FTP client lftp arises from insufficient validation of input data, allowing a hacker to delete files from the system’s current working directory.

The vulnerability of the console-based FTP client lftp exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to delete files from the current working directory of the system remotely...

openSUSE Security Update : lftp (openSUSE-2019-1110)

This update for lftp fixes the following issues: Security issue fixed : - CVE-2018-10916: Fixed an improper file name sanitization which could lead to loss of integrity of the local system bsc1103367. Other issue addressed : - The SSH login handling code detects password prompts more reliably...

openSUSE: Security Advisory for lftp (openSUSE-SU-2019:1110-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2019:1110-1 Security update for lftp

This update for lftp fixes the following issues: Security issue fixed: - CVE-2018-10916: Fixed an improper file name sanitization which could lead to loss of integrity of the local system bsc1103367. Other issue addressed: - The SSH login handling code detects password prompts more reliably...

Security update for lftp (moderate)

openSUSE Security Update: Security update for lftp Announcement ID: openSUSE-SU-2019:1110-1 Rating: moderate References: 1103367 1120946 Cross-References: CVE-2018-10916 Affected Products: openSUSE Leap 15.0 An update that solves one vulnerability and has one errata is now available. Description:...

openSUSE Security Update : lftp (openSUSE-2019-1059)

This update for lftp fixes the following issues : Security issue fixed : - CVE-2018-10916: Fixed an improper file name sanitization which could lead to loss of integrity of the local system bsc1103367. Other issue addressed : - The SSH login handling code detects password prompts more reliably...