CVE-2008-7264

The ftp_QUIT function in ftpserver.py in pyftpdlib before 0.5.0 allows remote authenticated users to cause a denial of service (file descriptor exhaustion and daemon outage) by sending a QUIT command during a disallowed data-transfer attempt.

CVSS v4.0

5.3 MEDIUMCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

CVSS v3.1

4.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

CVSS v2.0

4.0 MEDIUMAV:N/AC:L/Au:S/C:N/I:N/A:P

EPSS

1.35% chance of exploitation in the next 30 days, 70th percentile

Published

2010-10-19

Updated

2024-09-17

Proof-of-concept exploits (1)

• http://code.google.com/p/pyftpdlib/issues/detail?id=71

References

• CVE Record
• NVD entry

Related

• CVE-2008-7258
• CVE-2008-7267
• CVE-2008-7257
• CVE-2008-7268
• CVE-2008-7254
• CVE-2008-7269