GitHub Advisoryadvisory · PyPI

GHSA-cx59-cp6c-9fr8 pyftpdlib vulnerable to allocation of resources without limits

HIGH Published 2022-05-01 Modified 2024-10-21 Official page ↗
Aliases
CVE-2007-6740
Ecosystem
PyPI
Packages
pyftpdlib
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-770
Reviewed
2022-06-08

Affected packages

• PyPI pyftpdlib: < 0.2.0 → fixed in 0.2.0

Description

The ftp_STOU function in FTPServer.py in pyftpdlib before 0.2.0 does not limit the number of attempts to discover a unique filename, which might allow remote authenticated users to cause a denial of service via a STOU command.

Related

Alias · CVE (1)

  • CVE-2007-6740 The ftp_STOU function in FTPServer.py in pyftpdlib before 0.2.0 does not limit the number of attempts to discover a unique filename, which… vulnerability

Weakness · CWE (1)

  • CWE-770 Allocation of Resources Without Limits or Throttling weakness

References