NVD

Id
13729  
Name
CVE-2010-2251  
Description
The get1 command, as used by lftpget, in LFTP before 4.0.6 does not properly validate a server-provided filename before determining the destination filename of a download, which allows remote servers to create or overwrite arbitrary files via a Content-Disposition header that suggests a crafted filename, and possibly execute arbitrary code as a consequence of writing to a dotfile in a home directory.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2010-07-06  
Modified Date
2011-01-21  
Seq
2010-2251  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
76388 13729 CVE-2010-2251 http://lftp.yar.ru/news.html  View
76389 13729 CVE-2010-2251 FEDORA-2010-9819  View
76390 13729 CVE-2010-2251 SUSE-SR:2010:014  View
76391 13729 CVE-2010-2251 [oss-security] 20100517 [oCERT-2010-001] multiple http client unexpected download filename vulnerability  View
76392 13729 CVE-2010-2251 [oss-security] 20100520 Re: [oCERT-2010-001] multiple http client unexpected download filename vulnerability  View
76393 13729 CVE-2010-2251 [oss-security] 20100609 Re: [oCERT-2010-001] multiple http client unexpected download filename vulnerability  View
76394 13729 CVE-2010-2251 [oss-security] 20100610 Re: [oCERT-2010-001] multiple http client unexpected download filename vulnerability  View
76395 13729 CVE-2010-2251 http://wiki.rpath.com/Advisories:rPSA-2010-0073  View
76396 13729 CVE-2010-2251 DSA-2085  View
76397 13729 CVE-2010-2251 http://www.ocert.org/advisories/ocert-2010-001.html  View
76398 13729 CVE-2010-2251 20101027 rPSA-2010-0073-1 lftp  View
76399 13729 CVE-2010-2251 ADV-2010-1654  View
76400 13729 CVE-2010-2251 https://bugzilla.redhat.com/show_bug.cgi?id=591580  View
76401 13729 CVE-2010-2251 https://bugzilla.redhat.com/show_bug.cgi?id=602836  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36100 JVNDB-2010-001880 LFTP の get1 コマンドにおける任意のコードを実行される脆弱性 LFTP の get1 コマンドには、ダウンロードのリンク先ファイル名を決定する前に、 server-provided のファイル名を適切に認証しないため、任意のファイルを作成または上書きされる、および任意のコードを実行される脆弱性が存在します。 CVE-2010-2251 44831 CVE-2010-2251 13729 7.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001880.html 2010-07-06 2010-08-26 View