Em resumo
- CVE-2009-5012 é uma vulnerabilidade MÉDIO (CVSS 4.0) que afeta pyftpdlib, pyftpdlib (g.rodola).
- Chance de exploração nos próximos 30 dias (EPSS): 1.0%, maior que 63.2% das vulnerabilidades.
- Correção: atualize para 0.5.2 ou posterior.
| Package | Affected versions | Patched versions |
|---|
| pyftpdlib PyPI | < 0.5.2
| 0.5.2
|
| pyftpdlib | = 0.1= 0.1.1= 0.2.0= 0.3.0= 0.4.0= 0.5.0≤ 0.5.1
| No fix yet |
Description
ftpserver.py in pyftpdlib before 0.5.2 does not require the l permission for the MLST command, which allows remote authenticated users to bypass intended access restrictions and list the root directory via an FTP session.
NVD description
ftpserver.py in pyftpdlib before 0.5.2 does not require the l permission for the MLST command, which allows remote authenticated users to bypass intended access restrictions and list the root directory via an FTP session.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free