pyftpdlib Security Weakness and Multiple Remote Vulnerabilities
BID:44322
Info
pyftpdlib Security Weakness and Multiple Remote Vulnerabilities
| Bugtraq ID: | 44322 |
| Class: | Design Error |
| CVE: |
CVE-2007-6736 CVE-2007-6737 CVE-2007-6739 CVE-2007-6740 CVE-2007-6741 |
| Remote: | Yes |
| Local: | No |
| Published: | May 18 2007 12:00AM |
| Updated: | May 18 2007 12:00AM |
| Credit: | billiejoex; yanraber |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
pyftpdlib Security Weakness and Multiple Remote Vulnerabilities
pyftpdlib is prone to an authentication-bypass vulnerability, a denial-of-service vulnerability, a buffer-overflow vulnerability, an FTP-bounce issue, and a security weakness.
Exploiting these issues will allow attackers to obtain sensitive information, gain unauthorized access, execute arbitrary code within the context of the affected application, access and attack privileged network ports, or crash the affected application, denying further service to legitimate users.
Core FTP Server 1.0.347 and Core FTP Mini SFTP Server 1.0.347 are vulnerable; other versions may also be affected.
Versions prior to pyftpdlib 0.2.0 are vulnerable.
pyftpdlib is prone to an authentication-bypass vulnerability, a denial-of-service vulnerability, a buffer-overflow vulnerability, an FTP-bounce issue, and a security weakness.
Exploiting these issues will allow attackers to obtain sensitive information, gain unauthorized access, execute arbitrary code within the context of the affected application, access and attack privileged network ports, or crash the affected application, denying further service to legitimate users.
Core FTP Server 1.0.347 and Core FTP Mini SFTP Server 1.0.347 are vulnerable; other versions may also be affected.
Versions prior to pyftpdlib 0.2.0 are vulnerable.
Exploit / POC
pyftpdlib Security Weakness and Multiple Remote Vulnerabilities
An attacker can exploit some of these issues using readily available network utilities.
Currently we are not aware of any exploits for some these issues. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
An attacker can exploit some of these issues using readily available network utilities.
Currently we are not aware of any exploits for some these issues. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution / Fix
pyftpdlib Security Weakness and Multiple Remote Vulnerabilities
Solution:
Updates are available. Please see the references for details.
Solution:
Updates are available. Please see the references for details.
References
pyftpdlib Security Weakness and Multiple Remote Vulnerabilities
References:
References:
- Issue 11: (RFC2577) Reject PORT for privileged ports (billiejoex)
- Issue 20: "attempted login" counter is not increased on wrong username (billiejoex)
- Issue 25: Set a max number of tries for finding unique filename on STOU (billiejoex)
- Issue 3: Stop buffering if extremely long lines are received (billiejoex)
- Issue 9: Path traversal vulnerability (yanraber)
- pyftpdlib - History (Version: 0.2.0 - Date: 2007-09-17) (pyftpdlib)
- pyftpdlib - Homepage (g.rodola)