Ecosyste.ms: Advisories

Security Advisories: GSA_kwCzR0hTQS1mOHdnLTM2cjktN2Y0cc2uTg

Directory Traversal in pyftpdlib

Python FTP server library provides a high-level portable interface to easily write very efficient, scalable and asynchronous FTP servers with Python. Multiple directory traversal vulnerabilities in FTPServer.py in pyftpdlib before 0.2.0 allow remote authenticated users to access arbitrary files and directories via a .. (dot dot) in a (1) LIST, (2) STOR, or (3) RETR command.

Permalink: https://github.com/advisories/GHSA-f8wg-36r9-7f4q
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1mOHdnLTM2cjktN2Y0cc2uTg
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Moderate
Classification: General
Published: almost 2 years ago
Updated: about 1 year ago

CVSS Score: 6.3
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Identifiers: GHSA-f8wg-36r9-7f4q, CVE-2007-6736
References:

• https://nvd.nist.gov/vuln/detail/CVE-2007-6736
• https://github.com/giampaolo/pyftpdlib/issues/9
• https://github.com/advisories/GHSA-f8wg-36r9-7f4q
• https://github.com/pypa/advisory-database/tree/main/vulns/pyftpdlib/PYSEC-2010-20.yaml
• http://code.google.com/p/pyftpdlib/issues/detail?id=9
• http://code.google.com/p/pyftpdlib/source/browse/trunk/HISTORY
• http://code.google.com/p/pyftpdlib/source/detail?r=16
• http://code.google.com/p/pyftpdlib/source/diff?spec=svn16&r=16&format=side&path=/trunk/pyftpdlib/FTPServer.py

Repository: https://github.com/giampaolo/pyftpdlib
Blast Radius: 15.8

Affected Packages