CVE-2008-7264

Published: Oct 19, 2010Modified: Apr 29, 2026

4.0

Vector

AV:N/AC:L/Au:S/C:N/I:N/A:P

Exploitability: 8.0 / Impact: 2.9

Source: NVD

Description

The ftp_QUIT function in ftpserver.py in pyftpdlib before 0.5.0 allows remote authenticated users to cause a denial of service (file descriptor exhaustion and daemon outage) by sending a QUIT command during a disallowed data-transfer attempt.

Affected (5)

Products: G.rodola: Pyftpdlib

1 product

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
G.rodola Pyftpdlib	Up to 0.4.0
G.rodola Pyftpdlib	Version 0.1.1
G.rodola Pyftpdlib	Version 0.1
G.rodola Pyftpdlib	Version 0.2.0
G.rodola Pyftpdlib	Version 0.3.0

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (8)

http://code.google.com/p/pyftpdlib/issues/detail?id=71

Source: cve@mitre.org

ExploitPatch

http://code.google.com/p/pyftpdlib/source/browse/trunk/HISTORY

Source: cve@mitre.org

http://code.google.com/p/pyftpdlib/source/detail?r=344

Source: cve@mitre.org

http://code.google.com/p/pyftpdlib/source/diff?spec=svn344&r=344&format=side&path=/trunk/pyftpdlib/ftpserver.py

Source: cve@mitre.org

http://code.google.com/p/pyftpdlib/issues/detail?id=71

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatch

http://code.google.com/p/pyftpdlib/source/browse/trunk/HISTORY

Source: af854a3a-2127-422b-91ae-364da2661108

http://code.google.com/p/pyftpdlib/source/detail?r=344

Source: af854a3a-2127-422b-91ae-364da2661108

http://code.google.com/p/pyftpdlib/source/diff?spec=svn344&r=344&format=side&path=/trunk/pyftpdlib/ftpserver.py

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.