Red Hat Security Advisory: lftp security update
lftp: multiple HTTP client download filename vulnerability [OCERT 2010-001]
cpe:/o:redhat:enterprise_linux:5::client cpe:/o:redhat:enterprise_linux:5::server