CVE-2010-2072 Pyftpd 0.8.4 creates log files with predictable names in a temporary directory, which allows local users to cause a denial of service and obtain sensitive information.
LowCVSS 3.6
EPSS 0.31%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Pyftpd 0.8.4 creates log files with predictable names in a temporary directory, which allows local users to cause a denial of service and obtain sensitive information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/pyftpd(Debian:10) | < 0.8.5 | 0.8.5 |
| radovan garabik pyftpd | = 0.8.4 | No fix listed |
References
- bugs.debian.org
- [oss-security] 20100613 CVE request - pyftpd insecure usage of temporary directory mailing-list
- 40842 vdb-entry
- pyftpd-logfile-symlink(59429) vdb-entry