Buffer overflows in (1) try_netscape_proxy and (2) try_squid_eplf for lftp 2.6.9 and earlier allow remote HTTP servers to execute arbitrary code via long directory names that are processed by the ls or rels commands.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Lftp | Alexander_v._lukyanov | 2.3 (including) | 2.3 (including) |
| Lftp | Alexander_v._lukyanov | 2.4.9 (including) | 2.4.9 (including) |
| Lftp | Alexander_v._lukyanov | 2.5.2 (including) | 2.5.2 (including) |
| Lftp | Alexander_v._lukyanov | 2.6.0 (including) | 2.6.0 (including) |
| Lftp | Alexander_v._lukyanov | 2.6.3 (including) | 2.6.3 (including) |
| Lftp | Alexander_v._lukyanov | 2.6.4 (including) | 2.6.4 (including) |
| Lftp | Alexander_v._lukyanov | 2.6.5 (including) | 2.6.5 (including) |
| Lftp | Alexander_v._lukyanov | 2.6.6 (including) | 2.6.6 (including) |
| Lftp | Alexander_v._lukyanov | 2.6.7 (including) | 2.6.7 (including) |
| Lftp | Alexander_v._lukyanov | 2.6.8 (including) | 2.6.8 (including) |
| Lftp | Alexander_v._lukyanov | 2.6.9 (including) | 2.6.9 (including) |