[{"CVE":"CVE-2018-10916","severity":"moderate","public_date":"2018-05-16T00:00:00Z","advisories":["RHSA-2020:1045"],"bugzilla":"1610349","bugzilla_description":"CVE-2018-10916 lftp: particular remote file names may lead to current working directory erased","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["lftp-0:4.4.8-12.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10916.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2015-1419","severity":null,"public_date":"2015-01-19T00:00:00Z","advisories":[],"bugzilla":"1187041","bugzilla_description":"CVE-2015-1419 vsftpd: access restrictions bypass","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1419.json"},{"CVE":"CVE-2011-2523","severity":"important","public_date":"2011-07-04T00:00:00Z","advisories":[],"bugzilla":"1778781","bugzilla_description":"CVE-2011-2523 vsftpd: backdoor which opens a shell on port 6200/tcp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-78","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2523.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2011-2199","severity":"moderate","public_date":"2011-06-10T00:00:00Z","advisories":[],"bugzilla":"713950","bugzilla_description":"CVE-2011-2199 tftp: buffer overflow when setting utimeout option","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2199.json"},{"CVE":"CVE-2011-0762","severity":"important","public_date":"2011-03-01T00:00:00Z","advisories":["RHSA-2011:0337"],"bugzilla":"681667","bugzilla_description":"CVE-2011-0762 vsftpd: remote DoS via crafted glob pattern","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["vsftpd-0:2.0.1-9.el4","vsftpd-0:2.0.5-16.el5_6.1","vsftpd-0:2.2.2-6.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0762.json"},{"CVE":"CVE-2010-2251","severity":"moderate","public_date":"2010-05-17T00:00:00Z","advisories":["RHSA-2010:0585"],"bugzilla":"591580","bugzilla_description":"CVE-2010-2251 lftp: multiple HTTP client download filename vulnerability [OCERT 2010-001]","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":["lftp-0:3.7.11-4.el5_5.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2251.json"},{"CVE":"CVE-2007-5962","severity":"low","public_date":"2008-05-21T00:00:00Z","advisories":["RHSA-2008:0295"],"bugzilla":"397011","bugzilla_description":"CVE-2007-5962 vsftpd: memory leak when deny_file option is set","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-401","affected_packages":["vsftpd-0:2.0.5-12.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5962.json"},{"CVE":"CVE-2007-2348","severity":"low","public_date":"2007-01-09T00:00:00Z","advisories":["RHSA-2009:1278"],"bugzilla":"236238","bugzilla_description":"CVE-2007-2348 lftp mirror --script does not escape names and targets of symbolic links","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["lftp-0:3.7.11-4.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2348.json"},{"CVE":"CVE-2008-2375","severity":"moderate","public_date":"2006-06-28T00:00:00Z","advisories":["RHSA-2008:0680","RHSA-2008:0579"],"bugzilla":"453376","bugzilla_description":"CVE-2008-2375 older vsftpd authentication memory leak","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-401","affected_packages":["vsftpd-0:2.0.1-6.el4","vsftpd-0:1.2.1-3E.16"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2375.json"},{"CVE":"CVE-2005-0372","severity":"moderate","public_date":"2005-02-14T00:00:00Z","advisories":["RHSA-2005:410"],"bugzilla":"1617512","bugzilla_description":"CVE-2005-0372 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gftp-1:2.0.17-5","gftp-1:2.0.14-4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0372.json"},{"CVE":"CVE-2003-0963","severity":"moderate","public_date":"2003-12-13T00:00:00Z","advisories":["RHSA-2003:403","RHSA-2003:404"],"bugzilla":"1617106","bugzilla_description":"CVE-2003-0963 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["lftp-0:2.6.3-5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2003-0963.json"}]