Lucene search

K
cve[email protected]CVE-2007-6736
HistoryOct 03, 2022 - 4:14 p.m.

CVE-2007-6736

2022-10-0316:14:28
CWE-22
web.nvd.nist.gov
28
cve-2007-6736
directory traversal
pyftpdlib
vulnerability
ftpserver

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

6.6 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

69.1%

Multiple directory traversal vulnerabilities in FTPServer.py in pyftpdlib before 0.2.0 allow remote authenticated users to access arbitrary files and directories via a … (dot dot) in a (1) LIST, (2) STOR, or (3) RETR command.

Affected configurations

NVD
Node
g.rodolapyftpdlibRange0.1.1
OR
g.rodolapyftpdlibMatch0.1

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

6.6 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

69.1%