Buffer overflows in (1) try_netscape_proxy and (2) try_squid_eplf for lftp 2.6.9 and earlier allow remote HTTP servers to execute arbitrary code via long directory names that are processed by the ls or rels commands.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Lftp | Alexander_v._lukyanov | 2.3 (including) | 2.3 (including) |
| Lftp | Alexander_v._lukyanov | 2.4.9 (including) | 2.4.9 (including) |
| Lftp | Alexander_v._lukyanov | 2.5.2 (including) | 2.5.2 (including) |
| Lftp | Alexander_v._lukyanov | 2.6.0 (including) | 2.6.0 (including) |
| Lftp | Alexander_v._lukyanov | 2.6.3 (including) | 2.6.3 (including) |
| Lftp | Alexander_v._lukyanov | 2.6.4 (including) | 2.6.4 (including) |
| Lftp | Alexander_v._lukyanov | 2.6.5 (including) | 2.6.5 (including) |
| Lftp | Alexander_v._lukyanov | 2.6.6 (including) | 2.6.6 (including) |
| Lftp | Alexander_v._lukyanov | 2.6.7 (including) | 2.6.7 (including) |
| Lftp | Alexander_v._lukyanov | 2.6.8 (including) | 2.6.8 (including) |
| Lftp | Alexander_v._lukyanov | 2.6.9 (including) | 2.6.9 (including) |
| Red Hat Enterprise Linux 3 | RedHat | lftp-0:2.6.3-5 | * |
| Red Hat Linux 7.2 | RedHat | * | |
| Red Hat Linux 7.3 | RedHat | * | |
| Red Hat Linux 8.0 | RedHat | * | |
| Red Hat Linux 9 | RedHat | * |