Search for packages
| purl | pkg:pypi/pyftpdlib@0.5.2 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-2u11-41pn-z3a6 | ftpserver.py in pyftpdlib before 0.5.2 does not require the l permission for the MLST command, which allows remote authenticated users to bypass intended access restrictions and list the root directory via an FTP session. |
CVE-2009-5012
GHSA-h4g7-8m7r-87r9 PYSEC-2010-9 |
| VCID-8vjd-1g37-5ye6 | Race condition in the FTPHandler class in ftpserver.py in pyftpdlib before 0.5.2 allows remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the getpeername function having an ENOTCONN error, a different vulnerability than CVE-2010-3494. |
CVE-2009-5011
GHSA-62xg-239j-vxg7 PYSEC-2010-8 |
| VCID-ufjv-wgk3-sfcj | Race condition in the FTPHandler class in ftpserver.py in pyftpdlib before 0.5.2 allows remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the accept function having an unexpected value of None for the address, or an ECONNABORTED, EAGAIN, or EWOULDBLOCK error, a related issue to CVE-2010-3492. |
CVE-2010-3494
GHSA-hw4g-fhcp-x5mq PYSEC-2010-11 |
| VCID-zjev-ytqn-8yhs | Memory leak in the on_dtp_close function in ftpserver.py in pyftpdlib before 0.5.2 allows remote authenticated users to cause a denial of service (memory consumption) by sending a QUIT command during a data transfer. |
CVE-2009-5013
GHSA-8gv6-x88p-3f6h PYSEC-2010-10 |