Skip to content
OpenAdvisories
Medium · 6.5 CVE-2007-6740 EUVD-2010-0020GHSA-cx59-cp6c-9fr8PYSEC-2010-24

pyftpdlib vulnerable to allocation of resources without limits

Published Oct 19, 2010 · Updated Sep 17, 2024 · Assigned by mitre

Description

The ftp_STOU function in FTPServer.py in pyftpdlib before 0.2.0 does not limit the number of attempts to discover a unique filename, which might allow remote authenticated users to cause a denial of service via a STOU command.

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI pyftpdlib < 0.2.0 0.2.0 GHSA-cx59-cp6c-9fr8

References