CVE-2010-2251

CVE-2010-2251, security advisory, suse linux, suse, security, cve

CVE-2010-2251

Common Vulnerabilities and Exposures

[Previous] [Index] [Next]

Upstream information

CVE-2010-2251 at MITRE

Description

The get1 command, as used by lftpget, in LFTP before 4.0.6 does not properly validate a server-provided filename before determining the destination filename of a download, which allows remote servers to create or overwrite arbitrary files via a Content-Disposition header that suggests a crafted filename, and possibly execute arbitrary code as a consequence of writing to a dotfile in a home directory.

---

SUSE information

Overall state of this security issue: Resolved

This issue is currently rated as having important severity.

CVSS v2 Scores

	National Vulnerability Database
Base Score	7.5
Vector	AV:N/AC:L/Au:N/C:P/I:P/A:P
Access Vector	Network
Access Complexity	Low
Authentication	None
Confidentiality Impact	Partial
Integrity Impact	Partial
Availability Impact	Partial

SUSE Bugzilla entry: 606319 [RESOLVED / FIXED]

SUSE Security Advisories:

• SUSE-SR:2010:014, published Mon, 02 Aug 2010 15:00:00 +0000
openSUSE-SU-2010:0334-1

---

SUSE Timeline for this CVE

CVE page created: Tue Jul 9 17:17:20 2013
CVE page last modified: Wed Sep 18 19:11:31 2024