pyftpdlib 'PASV' Command Information Disclosure Vulnerability
BID:44310
Info
pyftpdlib 'PASV' Command Information Disclosure Vulnerability
| Bugtraq ID: | 44310 |
| Class: | Design Error |
| CVE: |
CVE-2007-6738 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 27 2007 12:00AM |
| Updated: | Mar 27 2007 12:00AM |
| Credit: | Reported by the vendor |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Exploit / POC
pyftpdlib 'PASV' Command Information Disclosure Vulnerability
An exploit isn't needed. Attackers can use readily available utilities to launch attacks.
An exploit isn't needed. Attackers can use readily available utilities to launch attacks.
Solution / Fix
pyftpdlib 'PASV' Command Information Disclosure Vulnerability
Solution:
Fixes are available; please see the references for more information.
Solution:
Fixes are available; please see the references for more information.
References
pyftpdlib 'PASV' Command Information Disclosure Vulnerability
References:
References:
- pyftpdlib - History (Version: 0.1.1 - Date: 2007-03-27) (g.rodola)
- pyftpdlib - Homepage (g.rodola)