Test ID:	1.3.6.1.4.1.25623.1.0.50773
Category:	Mandrake Local Security Checks
Title:	Mandrake Security Advisory MDKSA-2003:116 (lftp)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to lftp announced via advisory MDKSA-2003:116. A buffer overflow vulnerability was discovered by Ulf Harnhammar in the lftp FTP client when connecting to a web server using HTTP or HTTPS and using the ls or rels command on specially prepared directory. This vulnerability exists in lftp versions 2.3.0 through 2.6.9 and is corrected upstream in 2.6.10. The updated packages are patched to protect against this problem. Affected versions: 9.0, 9.1, 9.2, Corporate Server 2.1 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. https://secure1.securityspace.com/smysecure/catid.html?in=MDKSA-2003:116 Risk factor : High
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.