Skip to content
OpenAdvisories

Package · Debian

lftp

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • Medium 5.3
    CVE-2018-10916

    It has been discovered that lftp up to and including version 4.8.3 does not properly sanitize remote file names, leadin…

    [UNKNOWN] lftp lftp lftp Debian Ubuntu Alpine
  • Unscored —
    CVE-2010-2251

    The get1 command, as used by lftpget, in LFTP before 4.0.6 does not properly validate a server-provided filename before…

    lftp Debian
  • Unscored —
    CVE-2007-2348

    mirror --script in lftp before 3.5.9 does not properly quote shell metacharacters, which might allow remote user-assist…

    lftp Debian
  • Unscored —
    CVE-2003-0963 Public exploit EPSS 15%

    Buffer overflows in (1) try_netscape_proxy and (2) try_squid_eplf for lftp 2.6.9 and earlier allow remote HTTP servers …

    lftp Debian