Search for packages
| purl | pkg:pypi/pyftpdlib@0.4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-2u11-41pn-z3a6
Aliases: CVE-2009-5012 GHSA-h4g7-8m7r-87r9 PYSEC-2010-9 |
ftpserver.py in pyftpdlib before 0.5.2 does not require the l permission for the MLST command, which allows remote authenticated users to bypass intended access restrictions and list the root directory via an FTP session. |
Affected by 0 other vulnerabilities. |
|
VCID-5x4d-txr7-77bn
Aliases: CVE-2008-7263 GHSA-q6w2-jxcm-2crj PYSEC-2010-5 |
ftpserver.py in pyftpdlib before 0.5.0 does not delay its response after receiving an invalid login attempt, which makes it easier for remote attackers to obtain access via a brute-force attack. |
Affected by 5 other vulnerabilities. |
|
VCID-67rd-vz1v-yqac
Aliases: CVE-2009-5010 GHSA-mpg6-rgp4-35rr PYSEC-2010-7 |
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in pyftpdlib |
Affected by 4 other vulnerabilities. |
|
VCID-8vjd-1g37-5ye6
Aliases: CVE-2009-5011 GHSA-62xg-239j-vxg7 PYSEC-2010-8 |
Race condition in the FTPHandler class in ftpserver.py in pyftpdlib before 0.5.2 allows remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the getpeername function having an ENOTCONN error, a different vulnerability than CVE-2010-3494. |
Affected by 0 other vulnerabilities. |
|
VCID-crtn-sf6h-t7e3
Aliases: CVE-2008-7264 GHSA-8p2c-fghc-9hj4 PYSEC-2010-6 |
The ftp_QUIT function in ftpserver.py in pyftpdlib before 0.5.0 allows remote authenticated users to cause a denial of service (file descriptor exhaustion and daemon outage) by sending a QUIT command during a disallowed data-transfer attempt. |
Affected by 5 other vulnerabilities. |
|
VCID-ufjv-wgk3-sfcj
Aliases: CVE-2010-3494 GHSA-hw4g-fhcp-x5mq PYSEC-2010-11 |
Race condition in the FTPHandler class in ftpserver.py in pyftpdlib before 0.5.2 allows remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the accept function having an unexpected value of None for the address, or an ECONNABORTED, EAGAIN, or EWOULDBLOCK error, a related issue to CVE-2010-3492. |
Affected by 0 other vulnerabilities. |
|
VCID-zjev-ytqn-8yhs
Aliases: CVE-2009-5013 GHSA-8gv6-x88p-3f6h PYSEC-2010-10 |
Memory leak in the on_dtp_close function in ftpserver.py in pyftpdlib before 0.5.2 allows remote authenticated users to cause a denial of service (memory consumption) by sending a QUIT command during a data transfer. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||