Unscored CVE-2010-2072 EUVD-2010-2091GHSA-gj9w-hmvj-m22x

Pyftpd 0.8.4 creates log files with predictable names in a temporary directory, which allows local users to cause a denial of service and o…

Published Jun 16, 2010 · Updated Aug 7, 2024 · Assigned by redhat

Description

Pyftpd 0.8.4 creates log files with predictable names in a temporary directory, which allows local users to cause a denial of service and obtain sensitive information.

References

pyftpd-logfile-symlink(59429) vdb-entry
40842 vdb-entry
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=585773
[oss-security] 20100613 CVE request - pyftpd insecure usage of temporary directory mailing-list