[ MDVSA-2010:128 ] lftp

🗓️ 08 Jul 2010 00:00:00Reported by SecurityvulnsType

securityvulns

securityvulns🔗 vulners.com👁 50 Views

Vulnerability in lftp before 4.0.6 allows remote servers to create or overwrite arbitrary files via a crafted filenam

Reporter	Title	Published	Views	Family All 55
FreeBSD	lftp -- multiple HTTP client download filename vulnerability	9 Jun 201000:00	–	freebsd
BDU FSTEC	Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
Tenable Nessus	CentOS 5 : lftp (CESA-2010:0585)	3 Aug 201000:00	–	nessus
Tenable Nessus	Debian DSA-2085-1 : lftp - missing input validation	5 Aug 201000:00	–	nessus
Tenable Nessus	Fedora 12 : lftp-4.0.8-1.fc12 (2010-9819)	1 Jul 201000:00	–	nessus
Tenable Nessus	FreeBSD : lftp -- multiple HTTP client download filename vulnerability (29b7e3f4-b6a9-11df-ae63-f255a795cb21)	4 Sep 201000:00	–	nessus
Tenable Nessus	GLSA-201412-08 : Multiple packages, Multiple vulnerabilities fixed in 2010	15 Dec 201400:00	–	nessus
Tenable Nessus	Mandriva Linux Security Advisory : lftp (MDVSA-2010:128)	30 Jul 201000:00	–	nessus
Tenable Nessus	MiracleLinux 3 : lftp-3.7.11-4.AXS3.3 (AXSA:2010-400:01)	14 Jan 202600:00	–	nessus
Tenable Nessus	Oracle Linux 5 : lftp (ELSA-2010-0585)	12 Jul 201300:00	–	nessus

08 Jul 2010 00:00Current

9.5High risk

Vulners AI Score9.5

EPSS0.03629

lftp vulnerability remote servers arbitrary files crafted filename cve-2010-2251