Evil-DB LogoEvil-DB
← All CVEs

CVE-2003-0963

high · 7.5

Buffer overflows in (1) try_netscape_proxy and (2) try_squid_eplf for lftp 2.6.9 and earlier allow remote HTTP servers to execute arbitrary code via long directory names that are processed by the ls or rels commands.

7.5
CVSS
13.7%
EPSS (exploit prob.)
96th
EPSS percentile
2004-01-05
Published

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

VendorProductAffected versions
alexander_v._lukyanovlftp2.3
alexander_v._lukyanovlftp2.4.9
alexander_v._lukyanovlftp2.5.2
alexander_v._lukyanovlftp2.6.0
alexander_v._lukyanovlftp2.6.3
alexander_v._lukyanovlftp2.6.4
alexander_v._lukyanovlftp2.6.5
alexander_v._lukyanovlftp2.6.6
alexander_v._lukyanovlftp2.6.7
alexander_v._lukyanovlftp2.6.8
alexander_v._lukyanovlftp2.6.9

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2003-0963