rpm package
opensuse/lftp&distro=openSUSE Tumbleweed
pkg:rpm/opensuse/lftp&distro=openSUSE%20Tumbleweed
Vulnerabilities (2)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2018-10916 | — | < 4.9.2-1.7 | 4.9.2-1.7 | Aug 1, 2018 | It has been discovered that lftp up to and including version 4.8.3 does not properly sanitize remote file names, leading to a loss of integrity on the local system when reverse mirroring is used. A remote attacker may trick a user to use reverse mirroring on an attacker controlle | ||
| CVE-2014-0139 | — | < 4.7.4-1.1 | 4.7.4-1.1 | Apr 15, 2014 | cURL and libcurl 7.1 before 7.36.0, when using the OpenSSL, axtls, qsossl or gskit libraries for TLS, recognize a wildcard IP address in the subject's Common Name (CN) field of an X.509 certificate, which might allow man-in-the-middle attackers to spoof arbitrary SSL servers via |
- CVE-2018-10916Aug 1, 2018affected < 4.9.2-1.7fixed 4.9.2-1.7
It has been discovered that lftp up to and including version 4.8.3 does not properly sanitize remote file names, leading to a loss of integrity on the local system when reverse mirroring is used. A remote attacker may trick a user to use reverse mirroring on an attacker controlle
- CVE-2014-0139Apr 15, 2014affected < 4.7.4-1.1fixed 4.7.4-1.1
cURL and libcurl 7.1 before 7.36.0, when using the OpenSSL, axtls, qsossl or gskit libraries for TLS, recognize a wildcard IP address in the subject's Common Name (CN) field of an X.509 certificate, which might allow man-in-the-middle attackers to spoof arbitrary SSL servers via