CVE-2008-7262

CVE-2008-7262 concerns pyftpdlib’s FTPServer.py (pre-0.3.0) where multiple directory traversal flaws allow remote authenticated users to access arbitrary files/directories via a symlink-in-pathname in CWD, DELE, STOR, or RETR commands. The vulnerability is triggered by crafted pathnames containin...