PT-2018-2667 · Lftp+5 · Lftp+5

Tomsommero · Publicado 2018-08-01 · Atualizado 2024-06-15 · CVE-2018-10916

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:C

Name of the Vulnerable Software and Affected Versions lftp versions up to and including 4.8.3

Description The issue arises from lftp's failure to properly sanitize remote file names, leading to a loss of integrity on the local system when reverse mirroring is used. A remote attacker may trick a user into using reverse mirroring on an attacker-controlled FTP server, resulting in the removal of all files in the current working directory of the victim's system. This is due to insufficient input validation in the console FTP client.

Recommendations For lftp versions up to and including 4.8.3, avoid using reverse mirroring with untrusted FTP servers to minimize the risk of exploitation. As a temporary workaround, consider restricting the use of reverse mirroring until a patch is available.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

ALT-PU-2018-2263

BDU:2019-01302

CESA-2020_1045

CVE-2018-10916

OPENSUSE-SU-2019:1110-1

OPENSUSE-SU-2019_1059-1

OPENSUSE-SU-2019_1110-1

OPENSUSE-SU-2024:10915-1

RHSA-2020:1045

RHSA-2020_1045

SUSE-SU-2019:0642-1

SUSE-SU-2019:0643-1

SUSE-SU-2019_0642-1

SUSE-SU-2019_0643-1

USN-3731-1

USN-3731-2

Produtos afetados

Alt Linux

Centos

Red Hat

Suse

Ubuntu

Lftp

Referências · 31

• 🔥 https://github.com/lavv17/lftp/issues/452 · Exploit
• https://github.com/lavv17/lftp/commit/a27e07d90a4608ceaf928b1babb27d4d803e1992 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2018-10916 · Nota de Segurança
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10916 · Correção
• http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00036.html · Aviso do Fabricante
• https://osv.dev/vulnerability/SUSE-SU-2019:0643-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/openSUSE-SU-2019:1110-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2018-10916 · Aviso do Fabricante
• https://security.alpinelinux.org/vuln/CVE-2018-10916 · Nota
• https://osv.dev/vulnerability/USN-3731-1 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2018-10916 · Nota de Segurança
• https://suse.com/security/cve/CVE-2018-10916 · Nota
• http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00010.html · Aviso do Fabricante
• https://suse.com/support/update/announcement/2019/suse-su-20190643-1 · Nota
• https://ubuntu.com/security/CVE-2018-10916 · Aviso do Fabricante