Lucene search

GitHub Advisory DatabaseGHSA-5F3F-PG2C-CXCV

HistoryMay 01, 2022 - 6:45 p.m.

Improper Input Validation in pyftpdlib

2022-05-0118:45:57

CWE-20

GitHub Advisory Database

github.com

pyftpdlib

input validation

ftpserver

denial of service

remote attackers

long command

version 0.2.0

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

0.006

Percentile

79.3%

JSON

FTPServer.py in pyftpdlib before 0.2.0 allows remote attackers to cause a denial of service via a long command.

Affected configurations

Vulners

Node

g.rodolapyftpdlibRange<0.2.0

References

code.google.com/p/pyftpdlib/issues/detail?id=3

code.google.com/p/pyftpdlib/source/browse/trunk/HISTORY

code.google.com/p/pyftpdlib/source/detail?r=20

code.google.com/p/pyftpdlib/source/diff?spec=svn20&r=20&format=side&path=/trunk/pyftpdlib/FTPServer.py

github.com/advisories/GHSA-5f3f-pg2c-cxcv

github.com/giampaolo/pyftpdlib/issues/3

github.com/pypa/advisory-database/tree/main/vulns/pyftpdlib/PYSEC-2010-23.yaml

nvd.nist.gov/vuln/detail/CVE-2007-6739

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

0.006

Percentile

79.3%

JSON

Related for GHSA-5F3F-PG2C-CXCV