Skip to content
OpenAdvisories

Package · Debian

python-pyftpdlib

4 known vulnerabilities.

All Critical High Medium Low Exploited only

2 results · Clear filters · Feed

  • High 7.5
    CVE-2010-3494

    Concurrent Execution using Shared Resource with Improper Synchronization in pyftpdlib

    Race condition in the FTPHandler class in ftpserver.py in pyftpdlib before 0.5.2 allows remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the accept function having an unexp…

    pyftpdlib python-pyftpdlib python-pyftpdlib Debian Ubuntu PyPI
  • High —
    CVE-2009-5012

    Improper Access Control in pyftpdlib

    ftpserver.py in pyftpdlib before 0.5.2 does not require the l permission for the MLST command, which allows remote authenticated users to bypass intended access restrictions and list the root directory via an FTP session.

    pyftpdlib python-pyftpdlib Debian PyPI