Skip to content
OpenAdvisories
Unscored DSA-406 1 CVE

lftp - buffer overflow

Published Jan 5, 2004 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 3.0 lftp 2.4.9-1woody2

Vulnerabilities 1

  • Unscored —
    CVE-2003-0963 Public exploit EPSS 15%

    Buffer overflows in (1) try_netscape_proxy and (2) try_squid_eplf for lftp 2.6.9 and earlier allow remote HTTP servers …