# pyftpdlib (PyPI) vulnerabilities

14 known vulnerabilities, with the versions each affects and the releases that fix them.

## At a glance

- Latest release: not known (cve.now hasn't read this package's releases)
- Newest unaffected release: not known without release data
- Registry: https://pypi.org/project/pyftpdlib/

## Advisories (14)

### [CVE-2010-3494](https://cve.now/CVE-2010-3494): Race condition in the FTPHandler class in ftpserver.py in pyftpdlib before 0.5.2 allows remote attackers to cause a denial of service…

- Severity: Unrated
- Published: Oct 19, 2010
- Affected: fixed in 0.5.2.

### [CVE-2009-5013](https://cve.now/CVE-2009-5013): Memory leak in the on\_dtp\_close function in ftpserver.py in pyftpdlib before 0.5.2 allows remote authenticated users to cause a denial of…

- Severity: Unrated
- Published: Oct 19, 2010
- Affected: fixed in 0.5.2.

### [CVE-2009-5012](https://cve.now/CVE-2009-5012): ftpserver.py in pyftpdlib before 0.5.2 does not require the l permission for the MLST command, which allows remote authenticated users to…

- Severity: Unrated
- Published: Oct 19, 2010
- Affected: fixed in 0.5.2.

### [CVE-2009-5011](https://cve.now/CVE-2009-5011): Race condition in the FTPHandler class in ftpserver.py in pyftpdlib before 0.5.2 allows remote attackers to cause a denial of service…

- Severity: Unrated
- Published: Oct 19, 2010
- Affected: fixed in 0.5.2.

### [CVE-2009-5010](https://cve.now/CVE-2009-5010): Race condition in the FTPHandler class in ftpserver.py in pyftpdlib before 0.5.1 allows remote attackers to cause a denial of service…

- Severity: Unrated
- Published: Oct 19, 2010
- Affected: fixed in 0.5.1.

### [CVE-2008-7264](https://cve.now/CVE-2008-7264): The ftp\_QUIT function in ftpserver.py in pyftpdlib before 0.5.0 allows remote authenticated users to cause a denial of service (file…

- Severity: Unrated
- Published: Oct 19, 2010
- Affected: fixed in 0.5.0.

### [CVE-2008-7263](https://cve.now/CVE-2008-7263): ftpserver.py in pyftpdlib before 0.5.0 does not delay its response after receiving an invalid login attempt, which makes it easier for…

- Severity: Unrated
- Published: Oct 19, 2010
- Affected: fixed in 0.5.0.

### [CVE-2008-7262](https://cve.now/CVE-2008-7262): Multiple directory traversal vulnerabilities in FTPServer.py in pyftpdlib before 0.3.0 allow remote authenticated users to access…

- Severity: Unrated
- Published: Oct 19, 2010
- Affected: fixed in 0.3.0.

### [CVE-2007-6741](https://cve.now/CVE-2007-6741): The ftp\_PORT function in FTPServer.py in pyftpdlib before 0.2.0 does not prevent TCP connections to privileged ports if the destination IP…

- Severity: Unrated
- Published: Oct 19, 2010
- Affected: fixed in 0.2.0.

### [CVE-2007-6740](https://cve.now/CVE-2007-6740): The ftp\_STOU function in FTPServer.py in pyftpdlib before 0.2.0 does not limit the number of attempts to discover a unique filename, which…

- Severity: Unrated
- Published: Oct 19, 2010
- Affected: fixed in 0.2.0.

### [CVE-2007-6739](https://cve.now/CVE-2007-6739): FTPServer.py in pyftpdlib before 0.2.0 allows remote attackers to cause a denial of service via a long command.

- Severity: Unrated
- Published: Oct 19, 2010
- Affected: fixed in 0.2.0.

### [CVE-2007-6738](https://cve.now/CVE-2007-6738): pyftpdlib before 0.1.1 does not choose a random value for the port associated with the PASV command, which makes it easier for remote…

- Severity: Unrated
- Published: Oct 19, 2010
- Affected: fixed in 0.1.1.

### [CVE-2007-6737](https://cve.now/CVE-2007-6737): FTPServer.py in pyftpdlib before 0.2.0 does not increment the attempted\_logins count for a USER command that specifies an invalid…

- Severity: Unrated
- Published: Oct 19, 2010
- Affected: fixed in 0.2.0.

### [CVE-2007-6736](https://cve.now/CVE-2007-6736): Multiple directory traversal vulnerabilities in FTPServer.py in pyftpdlib before 0.2.0 allow remote authenticated users to access…

- Severity: Unrated
- Published: Oct 19, 2010
- Affected: fixed in 0.2.0.

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/packages/pypi/pyftpdlib
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.