debian/python-pyftpdlib vulnerabilities

Latest debian/python-pyftpdlib CVEs

Newest publication first

1. CVE-2010-3494 Concurrent Execution using Shared Resource with Improper Synchronization in pyftpdlib

   Published 2010-10-19

   Medium·CVSS 4.3

   Race condition in the FTPHandler class in ftpserver.py in pyftpdlib before 0.5.2 allows remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the accept function having an unexpected value of None f...

2. CVE-2009-5012 Improper Access Control in pyftpdlib

   Published 2010-10-19

   Medium·CVSS 4.0

   ftpserver.py in pyftpdlib before 0.5.2 does not require the l permission for the MLST command, which allows remote authenticated users to bypass intended access restrictions and list the root directory via an FTP session.

3. CVE-2009-5013 Uncontrolled Resource Consumption in pyftpdlib

   Published 2010-10-19

   Medium·CVSS 4.0

   Memory leak in the on_dtp_close function in ftpserver.py in pyftpdlib before 0.5.2 allows remote authenticated users to cause a denial of service (memory consumption) by sending a QUIT command during a data transfer.

4. CVE-2009-5011 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in pyftpdlib

   Published 2010-10-19

   Medium·CVSS 4.3 EPSS 0.92%

   Race condition in the FTPHandler class in ftpserver.py in pyftpdlib before 0.5.2 allows remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the getpeername function having an ENOTCONN error, a dif...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.