CVE-2008-7263

Published: Oct 19, 2010Modified: Apr 29, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

ftpserver.py in pyftpdlib before 0.5.0 does not delay its response after receiving an invalid login attempt, which makes it easier for remote attackers to obtain access via a brute-force attack.

Affected (5)

Products: G.rodola: Pyftpdlib

1 product

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
G.rodola Pyftpdlib	Up to 0.4.0
G.rodola Pyftpdlib	Version 0.1.1
G.rodola Pyftpdlib	Version 0.1
G.rodola Pyftpdlib	Version 0.2.0
G.rodola Pyftpdlib	Version 0.3.0

Related CWEs

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (8)

http://code.google.com/p/pyftpdlib/issues/detail?id=73

Source: cve@mitre.org

http://code.google.com/p/pyftpdlib/source/browse/trunk/HISTORY

Source: cve@mitre.org

http://code.google.com/p/pyftpdlib/source/detail?r=348

Source: cve@mitre.org

http://code.google.com/p/pyftpdlib/source/diff?spec=svn348&r=348&format=side&path=/trunk/pyftpdlib/ftpserver.py

Source: cve@mitre.org

http://code.google.com/p/pyftpdlib/issues/detail?id=73

Source: af854a3a-2127-422b-91ae-364da2661108

http://code.google.com/p/pyftpdlib/source/browse/trunk/HISTORY

Source: af854a3a-2127-422b-91ae-364da2661108

http://code.google.com/p/pyftpdlib/source/detail?r=348

Source: af854a3a-2127-422b-91ae-364da2661108

http://code.google.com/p/pyftpdlib/source/diff?spec=svn348&r=348&format=side&path=/trunk/pyftpdlib/ftpserver.py

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.