PT-2018-19278 · Lftp · Lftp

Published 2018-08-10 · Updated 2018-08-10

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions lftp versions prior to 4.8.4

Description The issue concerns a security vulnerability related to "file:" file names. It is fixed in version 4.8.4 of lftp. The vulnerability affects versions starting from 4.7.7.

Recommendations For versions prior to 4.8.4, update to version 4.8.4 to resolve the issue.

Related Identifiers

MGASA-2018-0334

Affected Products

Lftp

References · 4

• https://advisories.mageia.org/MGASA-2018-0334.html · Security Note
• https://osv.dev/vulnerability/MGASA-2018-0334 · Vendor Advisory
• https://bugs.mageia.org/show_bug.cgi?id=23374 · Note
• http://lftp.yar.ru/news.html · Note