CVE-2009-5013

Published: Oct 19, 2010Modified: Apr 29, 2026

4.0

Vector

AV:N/AC:L/Au:S/C:N/I:N/A:P

Exploitability: 8.0 / Impact: 2.9

Source: NVD

Description

Memory leak in the on_dtp_close function in ftpserver.py in pyftpdlib before 0.5.2 allows remote authenticated users to cause a denial of service (memory consumption) by sending a QUIT command during a data transfer.

Affected (7)

Products: G.rodola: Pyftpdlib

1 product

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
G.rodola Pyftpdlib	Up to 0.5.1
G.rodola Pyftpdlib	Version 0.1.1
G.rodola Pyftpdlib	Version 0.1
G.rodola Pyftpdlib	Version 0.2.0
G.rodola Pyftpdlib	Version 0.3.0
G.rodola Pyftpdlib	Version 0.4.0
G.rodola Pyftpdlib	Version 0.5.0

Related CWEs

References (8)

http://code.google.com/p/pyftpdlib/issues/detail?id=119

Source: cve@mitre.org

http://code.google.com/p/pyftpdlib/source/browse/trunk/HISTORY

Source: cve@mitre.org

http://code.google.com/p/pyftpdlib/source/detail?r=615

Source: cve@mitre.org

http://code.google.com/p/pyftpdlib/source/diff?spec=svn615&r=615&format=side&path=/trunk/pyftpdlib/ftpserver.py

Source: cve@mitre.org

http://code.google.com/p/pyftpdlib/issues/detail?id=119

Source: af854a3a-2127-422b-91ae-364da2661108

http://code.google.com/p/pyftpdlib/source/browse/trunk/HISTORY

Source: af854a3a-2127-422b-91ae-364da2661108

http://code.google.com/p/pyftpdlib/source/detail?r=615

Source: af854a3a-2127-422b-91ae-364da2661108

http://code.google.com/p/pyftpdlib/source/diff?spec=svn615&r=615&format=side&path=/trunk/pyftpdlib/ftpserver.py

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.