Skip to content
OpenAdvisories

Package · Debian

python-pyftpdlib

4 known vulnerabilities.

All Critical High Medium Low Exploited only

4 results · Feed

  • High 7.5
    CVE-2010-3494

    Concurrent Execution using Shared Resource with Improper Synchronization in pyftpdlib

    Race condition in the FTPHandler class in ftpserver.py in pyftpdlib before 0.5.2 allows remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the accept function having an unexp…

    pyftpdlib python-pyftpdlib python-pyftpdlib Debian Ubuntu PyPI
  • Medium —
    CVE-2009-5011

    Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in pyftpdlib

    Race condition in the FTPHandler class in ftpserver.py in pyftpdlib before 0.5.2 allows remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the getpeername function having an …

    pyftpdlib python-pyftpdlib Debian PyPI
  • Medium —
    CVE-2009-5013

    Uncontrolled Resource Consumption in pyftpdlib

    Memory leak in the on_dtp_close function in ftpserver.py in pyftpdlib before 0.5.2 allows remote authenticated users to cause a denial of service (memory consumption) by sending a QUIT command during a data transfer.

    pyftpdlib python-pyftpdlib Debian PyPI
  • High —
    CVE-2009-5012

    Improper Access Control in pyftpdlib

    ftpserver.py in pyftpdlib before 0.5.2 does not require the l permission for the MLST command, which allows remote authenticated users to bypass intended access restrictions and list the root directory via an FTP session.

    pyftpdlib python-pyftpdlib Debian PyPI