Test ID:	1.3.6.1.4.1.25623.1.0.122451
Category:	Oracle Linux Local Security Checks
Title:	Oracle: Security Advisory (ELSA-2009-1278)
Summary:	The remote host is missing an update for the 'lftp' package(s) announced via the ELSA-2009-1278 advisory.
Description:	Summary: The remote host is missing an update for the 'lftp' package(s) announced via the ELSA-2009-1278 advisory. Vulnerability Insight: [3.7.11-4] - Resolves: #461922 - lftp 'help mirror' does not display all options defined in manpage [3.7.11-3] - Resolves: #504594 - Alias ''edit' has multiple flaws [3.7.11-2] - Resolves: #504591 - Problems with spaces in file names over HTTP - Resolves: #504594 - Alias ''edit' has multiple flaws [3.7.11-1] - Resolves: #468858 - Clean up lftp source code - corrected licensing - Resolves: #458777 - License conflict between OpenSSL and GNU GPL v2 licenses in lftp - Resolves: #461922 - lftp 'help mirror' does not display all options defined in manpage - Resolves: #308721 - re-base to latest upstream 3.7.11 [3.7.3-1] - Resolves: #308721 rebase to latest upstream - Resolves: #239334 solves CVE-2007-2348 - Resolves: #422881 fixes bug with -c options - Resolves: #434294 fixes bug in (m)put with usage -c option Affected Software/OS: 'lftp' package(s) on Oracle Linux 5. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2007-2348 23736 http://www.securityfocus.com/bid/23736 25107 http://secunia.com/advisories/25107 25132 http://secunia.com/advisories/25132 36559 http://secunia.com/advisories/36559 ADV-2007-1590 http://www.vupen.com/english/advisories/2007/1590 RHSA-2009:1278 http://rhn.redhat.com/errata/RHSA-2009-1278.html http://bugs.gentoo.org/show_bug.cgi?id=173524 http://lftp.yar.ru/news.html https://issues.rpath.com/browse/RPL-1229 oval:org.mitre.oval:def:10806 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10806
Copyright	Copyright (C) 2015 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.