CVE-2008-7262

published 2010-10-19

CVE-2008-7262: Multiple directory traversal vulnerabilities in FTPServer.py in pyftpdlib before 0.3.0 allow remote authenticated users to access arbitrary files and…

Priority P4 31 medium 6.5 CVSS 2.0

AV N AC L Au S C P I P A P

Multiple directory traversal vulnerabilities in FTPServer.py in pyftpdlib before 0.3.0 allow remote authenticated users to access arbitrary files and directories via vectors involving a symlink in a pathname to a (1) CWD, (2) DELE, (3) STOR, or (4) RETR command.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
debian	python-pyftpdlib	—	—
g.rodola	pyftpdlib	<= 0.2.0	—
g.rodola	pyftpdlib	—	—
g.rodola	pyftpdlib	—	—
g.rodola	pyftpdlib	>= 0 < 0.3.0	0.3.0

CVSS provenance

nvd v2.0 6.5 MEDIUM AV:N/AC:L/Au:S/C:P/I:P/A:P

vendor_debian 6.5 LOW

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-22