| Max CVSS | 6.5 | Min CVSS | 4.0 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2009-5013 | 4.0 |
Memory leak in the on_dtp_close function in ftpserver.py in pyftpdlib before 0.5.2 allows remote authenticated users to cause a denial of service (memory consumption) by sending a QUIT command during a data transfer.
|
20-10-2010 - 04:00 | 19-10-2010 - 20:00 | |
| CVE-2007-6741 | 6.5 |
The ftp_PORT function in FTPServer.py in pyftpdlib before 0.2.0 does not prevent TCP connections to privileged ports if the destination IP address matches the source IP address of the connection from the FTP client, which might allow remote authentic
|
20-10-2010 - 04:00 | 19-10-2010 - 20:00 | |
| CVE-2009-5012 | 4.0 |
ftpserver.py in pyftpdlib before 0.5.2 does not require the l permission for the MLST command, which allows remote authenticated users to bypass intended access restrictions and list the root directory via an FTP session.
|
20-10-2010 - 04:00 | 19-10-2010 - 20:00 |