Skip to content
OpenAdvisories
Unscored RHSA-2003:404 1 CVE

Red Hat Security Advisory: lftp security update

Published Sep 12, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 8

ReleasePackageFixed in
Red Hat · RHEL 3 enterprise_linux:3::as lftp 0:2.6.3-5
Red Hat · RHEL 3 enterprise_linux:3::as lftp-debuginfo 0:2.6.3-5
Red Hat · RHEL 3 enterprise_linux:3::desktop lftp 0:2.6.3-5
Red Hat · RHEL 3 enterprise_linux:3::desktop lftp-debuginfo 0:2.6.3-5
Red Hat · RHEL 3 enterprise_linux:3::es lftp 0:2.6.3-5
Red Hat · RHEL 3 enterprise_linux:3::es lftp-debuginfo 0:2.6.3-5
Red Hat · RHEL 3 enterprise_linux:3::ws lftp 0:2.6.3-5
Red Hat · RHEL 3 enterprise_linux:3::ws lftp-debuginfo 0:2.6.3-5

Vulnerabilities 1

  • Unscored —
    CVE-2003-0963 Public exploit EPSS 15%

    Buffer overflows in (1) try_netscape_proxy and (2) try_squid_eplf for lftp 2.6.9 and earlier allow remote HTTP servers …

    lftp Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=111717
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2003/rhsa-2003_404.json
  • report
    https://access.redhat.com/security/cve/CVE-2003-0963
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617106
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2003-0963
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2003-0963