Lucene search
+L

19 matches found

osv_ghsa
osv_ghsa
•added 2022/05/01 6:45 p.m.•99 views

GHSA-CX59-CP6C-9FR8 pyftpdlib vulnerable to allocation of resources without limits

The ftpSTOU function in FTPServer.py in pyftpdlib before 0.2.0 does not limit the number of attempts to discover a unique filename, which might allow remote authenticated users to cause a denial of service via a STOU command...

7.1CVSS5.9AI score0.01748EPSS
SaveExploits0References9
Github Security Blog
Github Security Blog
•added 2022/05/01 6:45 p.m.•62 views

pyftpdlib vulnerable to allocation of resources without limits

The ftpSTOU function in FTPServer.py in pyftpdlib before 0.2.0 does not limit the number of attempts to discover a unique filename, which might allow remote authenticated users to cause a denial of service via a STOU command...

4CVSS4.4AI score0.01748EPSS
SaveExploits0References8Affected Software1
NVD
NVD
•added 2010/10/19 8:00 p.m.•49 views

CVE-2007-6740

The ftpSTOU function in FTPServer.py in pyftpdlib before 0.2.0 does not limit the number of attempts to discover a unique filename, which might allow remote authenticated users to cause a denial of service via a STOU command...

4CVSS6.1AI score0.01748EPSS
SaveExploits0References4
PyPA
PyPA
•added 2010/10/19 8:00 p.m.•18 views

PYSEC-2010-24

The ftpSTOU function in FTPServer.py in pyftpdlib before 0.2.0 does not limit the number of attempts to discover a unique filename, which might allow remote authenticated users to cause a denial of service via a STOU command...

4CVSS6.6AI score0.01748EPSS
SaveExploits0References5Affected Software1
CVE
CVE
•added 2010/10/19 7:00 p.m.•93 views

CVE-2007-6740

CVE-2007-6740 affects pyftpdlib: FTPServer.py ftp_STOU does not limit attempts to find a unique filename, enabling remote authenticated users to cause a denial of service via STOU. Impact and fix: DoS via STOU as described; version before 0.2.0 is affected; upgrade to 0.2.0+ to remediate (exact p...

4CVSS6.2AI score0.01748EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
•added 2010/10/19 12:00 a.m.•9 views

PT-2010-1238

Name of the Vulnerable Software and Affected Versions pyftpdlib versions prior to 0.2.0 Description The issue is related to the ftp STOU function in FTPServer.py, which does not limit the number of attempts to discover a unique filename. This could allow remote authenticated users to cause a deni...

7.1CVSS0.01748EPSS
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/10/19 12:00 a.m.•5 views

CVE-2007-6740: Undefined Security Weakness

The ftpSTOU function in FTPServer.py in pyftpdlib before 0.2.0 does not limit the number of attempts to discover a unique filename, which might allow remote authenticated users to cause a denial of service via a STOU command...

4CVSS5.9AI score0.01748EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2010/04/05 3:15 p.m.•45 views

CVE-2001-1587

NWFTPD.nlm before 5.01w in the FTP server in Novell NetWare allows remote attackers to cause a denial of service abend via an anonymous STOU command...

6.6AI score0.01148EPSS
SaveExploits0References1
CVE
CVE
•added 2010/04/05 3:15 p.m.•78 views

CVE-2001-1587

Technical details (affected products, vulnerable component, impact, remediation) are not publicly provided in the supplied documents. Monitor for updates.

5CVSS6.9AI score0.01148EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/04/05 12:00 a.m.•9 views

CVE-2001-1587: Improper Restriction of Operations within the Bounds of a Memory Buffer

NWFTPD.nlm before 5.01w in the FTP server in Novell NetWare allows remote attackers to cause a denial of service abend via an anonymous STOU command...

5CVSS5.8AI score0.01148EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2008/10/14 12:00 a.m.•32 views

Serv-U File Renaming Directory Traversal and 'STOU' DoS Vulnerabilities

The host is running Serv-U FTP Server, which is prone to Directory Traversal and Denial of Service Vulnerabilities. The flaws are due to, - error in handling 'STOU' FTP command. It can exhaust available CPU resources when exploited through a specially crafted argument vaule. - input validation...

0.4AI score
SaveExploits0References3
NVD
NVD
•added 2008/10/09 12:00 a.m.•33 views

CVE-2008-4500

Serv-U 7.0.0.1 through 7.3, including 7.2.0.1, allows remote authenticated users to cause a denial of service CPU consumption via a crafted stou command, probably related to MS-DOS device names, as demonstrated using "con:1"...

4CVSS6.2AI score0.10253EPSS
SaveExploits2References6
Prion
Prion
•added 2008/10/09 12:00 a.m.•25 views

Command injection

Serv-U 7.0.0.1 through 7.3, including 7.2.0.1, allows remote authenticated users to cause a denial of service CPU consumption via a crafted stou command, probably related to MS-DOS device names, as demonstrated using "con:1"...

4CVSS6.4AI score0.10253EPSS
SaveExploits2References6Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/10/08 12:00 a.m.•13 views

CVE-2008-4500: Improper Input Validation

Serv-U 7.0.0.1 through 7.3, including 7.2.0.1, allows remote authenticated users to cause a denial of service CPU consumption via a crafted stou command, probably related to MS-DOS device names, as demonstrated using "con:1"...

4CVSS5.8AI score0.10253EPSS
SaveExploits2References2
Oracle linux
Oracle linux
•added 2008/05/30 12:00 a.m.•46 views

vsftpd security and bug fix update

2.0.5-12 - fix CVE-2007-5962: vsftpd memory leak when denyfile option is set - Resolves: 423001 2.0.5-11 - add new option to log login failures based on user list - Resolves: 345791 - fix userconfigdir option - Resolves: 400921 - allow usernames starting with '' or '.' - Resolves: 386561 - fix th...

7.1CVSS1.2AI score0.12061EPSS
SaveExploits4
OpenVAS
OpenVAS
•added 2005/11/03 12:00 a.m.•68 views

Serv-U FTP 4.x 5.x DoS

It is possible to crash the remote FTP server by sending it a STOU command. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

5CVSS6.8AI score0.12352EPSS
SaveExploits2References1
CVE
CVE
•added 2005/02/20 5:00 a.m.•77 views

CVE-2004-1675

CVE-2004-1675 affects Serv-U FTP Server 4.x–5.x. The vulnerability is triggered by the STOU command with an MS-DOS device name argument (e.g., COM1, LPT1, PRN, AUX), causing an application crash and a remote denial of service. Public references describe this as a remote DoS without user interacti...

5CVSS6.8AI score0.12352EPSS
SaveExploits2References4Affected Software1
Tenable Nessus
Tenable Nessus
•added 2004/09/13 12:00 a.m.•24 views

Serv-U FTP Server < 5.2.0.1 'STOU' Command Remote DoS

Binary data 2275.prm...

5CVSS7.3AI score0.12352EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2000/08/03 12:00 a.m.•11 views

CVE-2000-0645: Undefined Security Weakness

WFTPD and WFTPD Pro 2.41 allows remote attackers to cause a denial of service by using the RESTART REST command and writing beyond the end of a file, or writing to a file that does not exist, via commands such as STORE UNIQUE STOU, STORE STOR, or APPEND APPE...

6.4CVSS5.9AI score0.04921EPSS
SaveExploits2References1
Rows per page
Query Builder