CVE-2008-7264 — Improper Input Validation in Pyftpdlib

CWE-20 — Improper Input Validation5 documents4 sources
Severity
4.0MEDIUMNVD
EPSS
0.8%
top 25.75%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
G.rodola PyftpdlibDebian Python-pyftpdlib
Timeline
PublishedOct 19
Latest updateMay 17

Description

The ftp_QUIT function in ftpserver.py in pyftpdlib before 0.5.0 allows remote authenticated users to cause a denial of service (file descriptor exhaustion and daemon outage) by sending a QUIT command during a disallowed data-transfer attempt.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 8.0 | Impact: 2.9

Affected Packages3 packages

▶PyPIg.rodola/pyftpdlib< 0.5.0
▶NVDg.rodola/pyftpdlib0.4.0+4

Patches

Patch: code.google.com ↗Patch: code.google.com ↗

🔴Vulnerability Details

3
OSV
Improper input validation in pyftpdlib↗2022-05-17
▶
GHSA
Improper input validation in pyftpdlib↗2022-05-17
▶
OSV
CVE-2008-7264: The ftp_QUIT function in ftpserver↗2010-10-19
▶

📋Vendor Advisories

1
Debian
CVE-2008-7264: python-pyftpdlib - The ftp_QUIT function in ftpserver.py in pyftpdlib before 0.5.0 allows remote au...↗2008
▶