Vulnerability Details : CVE-2007-2348
mirror --script in lftp before 3.5.9 does not properly quote shell metacharacters, which might allow remote user-assisted attackers to execute shell commands via a malicious script. NOTE: it is not clear whether this issue crosses security boundaries, since the script already supports commands such as "get" which could overwrite executable files.
Exploit prediction scoring system (EPSS) score for CVE-2007-2348
Probability of exploitation activity in the next 30 days: 2.12%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 89 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2007-2348
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
|---|---|---|---|---|---|
|
6.8
|
MEDIUM | AV:N/AC:M/Au:N/C:P/I:P/A:P |
8.6
|
6.4
|
NIST |
Vendor statements for CVE-2007-2348
-
Red Hat 2009-09-02This issue does not affect lftp as supplied with Red Hat Enterprise Linux 3. This issue was addressed for Red Hat Enterprise Linux 5 by https://rhn.redhat.com/errata/RHSA-2009-1278.html The Red Hat Security Response Team has rated this issue as having low security impact, a future update to Red Hat Enterprise Linux 4 may address this flaw.
-
http://www.securityfocus.com/bid/23736
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10806
-
https://issues.rpath.com/browse/RPL-1229
-
http://www.vupen.com/english/advisories/2007/1590
-
http://bugs.gentoo.org/show_bug.cgi?id=173524
-
http://rhn.redhat.com/errata/RHSA-2009-1278.html
-
http://lftp.yar.ru/news.html
LFTP - news
- cpe:2.3:a:alexander_v._lukyanov:lftp:*:*:*:*:*:*:*:*