PT-2010-1812 · Pyftpdlib · Pyftpdlib

Paolo Losi · Publicado 2010-10-19 · Atualizado 2022-05-02 · CVE-2009-5010

Positive Technologies (AI Summary)

CVSS v4.0

6.3

Média

Vetor base

AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions pyftpdlib versions prior to 0.5.1

Description A race condition exists in the FTPHandler class in ftpserver.py, allowing remote attackers to cause a denial of service by establishing and then immediately closing a TCP connection. This leads to the accept function having an unexpected return value of None.

Recommendations For versions prior to 0.5.1, update to version 0.5.1 or later to resolve the issue.

Correção

Race Condition

Enumeração de Fraquezas

CWE-362

Identificadores relacionados

CVE-2009-5010

GHSA-MPG6-RGP4-35RR

PYSEC-2010-7

Produtos afetados

Pyftpdlib

Referências · 16

• https://github.com/giampaolo/pyftpdlib · Nota
• https://github.com/pypa/advisory-database/tree/main/vulns/pyftpdlib/PYSEC-2010-7.yaml · Nota
• http://bugs.python.org/issue6706 · Correção
• http://openwall.com/lists/oss-security/2010/09/24/3 · Nota
• https://bugs.launchpad.net/zodb/+bug/135108 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-5010 · Nota de Segurança
• http://code.google.com/p/pyftpdlib/issues/detail?id=91 · Nota
• https://osv.dev/vulnerability/GHSA-mpg6-rgp4-35rr · Aviso do Fabricante
• http://code.google.com/p/pyftpdlib/source/detail?r=439 · Nota
• https://github.com/advisories/GHSA-mpg6-rgp4-35rr · Nota
• http://openwall.com/lists/oss-security/2010/09/22/3 · Nota
• http://code.google.com/p/pyftpdlib/source/diff?spec=svn439&r=439&format=side&path=/trunk/pyftpdlib/ftpserver.py · Nota
• https://osv.dev/vulnerability/PYSEC-2010-7 · Aviso do Fabricante
• http://code.google.com/p/pyftpdlib/source/browse/trunk/HISTORY · Nota
• http://openwall.com/lists/oss-security/2010/09/11/2 · Nota