Skip to main content
← PyPI

pyftpdlib

14 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
14
Registry
PyPI

Advisories 14

  • Race condition in the FTPHandler class in ftpserver.py in pyftpdlib before 0.5.2 allows remote attackers to cause a denial of service…

    Affected: fixed in 0.5.2.

  • Memory leak in the on_dtp_close function in ftpserver.py in pyftpdlib before 0.5.2 allows remote authenticated users to cause a denial of…

    Affected: fixed in 0.5.2.

  • ftpserver.py in pyftpdlib before 0.5.2 does not require the l permission for the MLST command, which allows remote authenticated users to…

    Affected: fixed in 0.5.2.

  • Race condition in the FTPHandler class in ftpserver.py in pyftpdlib before 0.5.2 allows remote attackers to cause a denial of service…

    Affected: fixed in 0.5.2.

  • Race condition in the FTPHandler class in ftpserver.py in pyftpdlib before 0.5.1 allows remote attackers to cause a denial of service…

    Affected: fixed in 0.5.1.

  • The ftp_QUIT function in ftpserver.py in pyftpdlib before 0.5.0 allows remote authenticated users to cause a denial of service (file…

    Affected: fixed in 0.5.0.

  • ftpserver.py in pyftpdlib before 0.5.0 does not delay its response after receiving an invalid login attempt, which makes it easier for…

    Affected: fixed in 0.5.0.

  • Multiple directory traversal vulnerabilities in FTPServer.py in pyftpdlib before 0.3.0 allow remote authenticated users to access…

    Affected: fixed in 0.3.0.

  • The ftp_PORT function in FTPServer.py in pyftpdlib before 0.2.0 does not prevent TCP connections to privileged ports if the destination IP…

    Affected: fixed in 0.2.0.

  • The ftp_STOU function in FTPServer.py in pyftpdlib before 0.2.0 does not limit the number of attempts to discover a unique filename, which…

    Affected: fixed in 0.2.0.

  • FTPServer.py in pyftpdlib before 0.2.0 allows remote attackers to cause a denial of service via a long command.

    Affected: fixed in 0.2.0.

  • pyftpdlib before 0.1.1 does not choose a random value for the port associated with the PASV command, which makes it easier for remote…

    Affected: fixed in 0.1.1.

  • FTPServer.py in pyftpdlib before 0.2.0 does not increment the attempted_logins count for a USER command that specifies an invalid…

    Affected: fixed in 0.2.0.

  • Multiple directory traversal vulnerabilities in FTPServer.py in pyftpdlib before 0.2.0 allow remote authenticated users to access…

    Affected: fixed in 0.2.0.