Unrated severityNVD Advisory· Published Jan 5, 2004· Updated Apr 16, 2026
CVE-2003-0963
CVE-2003-0963
Description
Buffer overflows in (1) try_netscape_proxy and (2) try_squid_eplf for lftp 2.6.9 and earlier allow remote HTTP servers to execute arbitrary code via long directory names that are processed by the ls or rels commands.
Affected products
11cpe:2.3:a:alexander_v._lukyanov:lftp:2.3:*:*:*:*:*:*:*+ 10 more
- cpe:2.3:a:alexander_v._lukyanov:lftp:2.3:*:*:*:*:*:*:*
- cpe:2.3:a:alexander_v._lukyanov:lftp:2.4.9:*:*:*:*:*:*:*
- cpe:2.3:a:alexander_v._lukyanov:lftp:2.5.2:*:*:*:*:*:*:*
- cpe:2.3:a:alexander_v._lukyanov:lftp:2.6.0:*:*:*:*:*:*:*
- cpe:2.3:a:alexander_v._lukyanov:lftp:2.6.3:*:*:*:*:*:*:*
- cpe:2.3:a:alexander_v._lukyanov:lftp:2.6.4:*:*:*:*:*:*:*
- cpe:2.3:a:alexander_v._lukyanov:lftp:2.6.5:*:*:*:*:*:*:*
- cpe:2.3:a:alexander_v._lukyanov:lftp:2.6.6:*:*:*:*:*:*:*
- cpe:2.3:a:alexander_v._lukyanov:lftp:2.6.7:*:*:*:*:*:*:*
- cpe:2.3:a:alexander_v._lukyanov:lftp:2.6.8:*:*:*:*:*:*:*
- cpe:2.3:a:alexander_v._lukyanov:lftp:2.6.9:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
15- patches.sgi.com/support/free/security/advisories/20040101-01-Unvd
- patches.sgi.com/support/free/security/advisories/20040202-01-U.ascnvd
- marc.infonvd
- marc.infonvd
- marc.infonvd
- marc.infonvd
- marc.infonvd
- secunia.com/advisories/10525nvd
- secunia.com/advisories/10548nvd
- www.debian.org/security/2004/dsa-406nvd
- www.mandriva.com/security/advisoriesnvd
- www.novell.com/linux/security/advisories/2003_051_lftp.htmlnvd
- www.redhat.com/support/errata/RHSA-2003-403.htmlnvd
- www.redhat.com/support/errata/RHSA-2003-404.htmlnvd
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11180nvd
News mentions
0No linked articles in our index yet.