GitHub Advisoryadvisory · PyPI
GHSA-q6w2-jxcm-2crj Improper Authentication in pyftpdlib
MEDIUM
Official page ↗
- Aliases
- CVE-2008-7263
- Ecosystem
- PyPI
- Packages
- pyftpdlib
- Severity
- Moderate
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
- Weaknesses
- CWE-287
- Reviewed
- 2022-06-09
Affected packages
• PyPI pyftpdlib: < 0.5.0 → fixed in 0.5.0
Description
ftpserver.py in pyftpdlib before 0.5.0 does not delay its response after receiving an invalid login attempt, which makes it easier for remote attackers to obtain access via a brute-force attack.
Related
Alias · CVE (1)
- CVE-2008-7263 ftpserver.py in pyftpdlib before 0.5.0 does not delay its response after receiving an invalid login attempt, which makes it easier for… vulnerability
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- https://nvd.nist.gov/vuln/detail/CVE-2008-7263 advisory
- https://github.com/giampaolo/pyftpdlib/issues/73 web
- https://github.com/advisories/GHSA-q6w2-jxcm-2crj advisory
- https://github.com/giampaolo/pyftpdlib package
- https://github.com/pypa/advisory-database/tree/main/vulns/pyftpdlib/PYSEC-2010-5.yaml web
- http://code.google.com/p/pyftpdlib/issues/detail?id=73 web
- http://code.google.com/p/pyftpdlib/source/browse/trunk/HISTORY web
- http://code.google.com/p/pyftpdlib/source/detail?r=348 web
- http://code.google.com/p/pyftpdlib/source/diff?spec=svn348&r=348&format=side&path=/trunk/pyftpdlib/ftpserver.py web