CVE-2009-5012

ftpserver.py in pyftpdlib before 0.5.2 does not require the l permission for the MLST command, which allows remote authenticated users to bypass intended access restrictions and list the root directory via an FTP session...

PT-2010-1814

Name of the Vulnerable Software and Affected Versions pyftpdlib versions prior to 0.5.2 Description The issue allows remote authenticated users to bypass intended access restrictions and list the root directory via an FTP session, due to the lack of required permissions for the MLST command in...