The remote host is missing an update to the system as announced in the referenced advisory.

Update your system with the appropriate patches or software upgrades. https://bugzilla.redhat.com/show_bug.cgi?id=591580 http://www.vuxml.org/freebsd/29b7e3f4-b6a9-11df-ae63-f255a795cb21.html

The following package is affected: lftp CVE-2010-2251 The get1 command, as used by lftpget, in LFTP before 4.0.6 does not properly validate a server-provided filename before determining the destination filename of a download, which allows remote servers to create or overwrite arbitrary files via a Content-Disposition header that suggests a crafted filename, and possibly execute arbitrary code as a consequence of writing to a dotfile in a home directory.