LFTP Project LFTP 4.6.1

CPE Details

LFTP Project LFTP 4.6.1
lftp_project
lftp
4.6.1
2019-09-17
14h06 +00:00
2019-09-17
14h06 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:lftp_project:lftp:4.6.1:*:*:*:*:*:*:*

Informations

Vendor

lftp_project

Product

lftp

Version

4.6.1

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2018-10916 2018-08-01 12h00 +00:00 It has been discovered that lftp up to and including version 4.8.3 does not properly sanitize remote file names, leading to a loss of integrity on the local system when reverse mirroring is used. A remote attacker may trick a user to use reverse mirroring on an attacker controlled FTP server, resulting in the removal of all files in the current working directory of the victim's system.
6.5
Moyen