Lucene search
+L

14 matches found

OSV
OSV
•added 2022/05/01 6:45 p.m.•94 views

GHSA-CX59-CP6C-9FR8 pyftpdlib vulnerable to allocation of resources without limits

The ftpSTOU function in FTPServer.py in pyftpdlib before 0.2.0 does not limit the number of attempts to discover a unique filename, which might allow remote authenticated users to cause a denial of service via a STOU command...

7.1CVSS5.9AI score0.01748EPSS
SaveExploits0References9
Github Security Blog
Github Security Blog
•added 2022/05/01 6:45 p.m.•59 views

pyftpdlib vulnerable to allocation of resources without limits

The ftpSTOU function in FTPServer.py in pyftpdlib before 0.2.0 does not limit the number of attempts to discover a unique filename, which might allow remote authenticated users to cause a denial of service via a STOU command...

4CVSS4.4AI score0.01748EPSS
SaveExploits0References8Affected Software1
NVD
NVD
•added 2010/10/19 8:00 p.m.•48 views

CVE-2007-6740

The ftpSTOU function in FTPServer.py in pyftpdlib before 0.2.0 does not limit the number of attempts to discover a unique filename, which might allow remote authenticated users to cause a denial of service via a STOU command...

4CVSS6.1AI score0.01748EPSS
SaveExploits0References4
CVE
CVE
•added 2010/10/19 7:00 p.m.•89 views

CVE-2007-6740

CVE-2007-6740 affects pyftpdlib: FTPServer.py ftp_STOU does not limit attempts to find a unique filename, enabling remote authenticated users to cause a denial of service via STOU. Impact and fix: DoS via STOU as described; version before 0.2.0 is affected; upgrade to 0.2.0+ to remediate (exact p...

4CVSS6.2AI score0.01748EPSS
SaveExploits0References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/10/19 12:00 a.m.•5 views

CVE-2007-6740: Undefined Security Weakness

The ftpSTOU function in FTPServer.py in pyftpdlib before 0.2.0 does not limit the number of attempts to discover a unique filename, which might allow remote authenticated users to cause a denial of service via a STOU command...

4CVSS5.9AI score0.01748EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2010/04/05 3:15 p.m.•45 views

CVE-2001-1587

NWFTPD.nlm before 5.01w in the FTP server in Novell NetWare allows remote attackers to cause a denial of service abend via an anonymous STOU command...

6.6AI score0.01148EPSS
SaveExploits0References1
CVE
CVE
•added 2010/04/05 3:15 p.m.•77 views

CVE-2001-1587

Technical details (affected products, vulnerable component, impact, remediation) are not publicly provided in the supplied documents. Monitor for updates.

5CVSS6.9AI score0.01148EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/04/05 12:00 a.m.•9 views

CVE-2001-1587: Improper Restriction of Operations within the Bounds of a Memory Buffer

NWFTPD.nlm before 5.01w in the FTP server in Novell NetWare allows remote attackers to cause a denial of service abend via an anonymous STOU command...

5CVSS5.8AI score0.01148EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2008/10/14 12:00 a.m.•30 views

Serv-U File Renaming Directory Traversal and 'STOU' DoS Vulnerabilities

The host is running Serv-U FTP Server, which is prone to Directory Traversal and Denial of Service Vulnerabilities. The flaws are due to, - error in handling 'STOU' FTP command. It can exhaust available CPU resources when exploited through a specially crafted argument vaule. - input validation...

0.4AI score
SaveExploits0References3
NVD
NVD
•added 2008/10/09 12:00 a.m.•28 views

CVE-2008-4500

Serv-U 7.0.0.1 through 7.3, including 7.2.0.1, allows remote authenticated users to cause a denial of service CPU consumption via a crafted stou command, probably related to MS-DOS device names, as demonstrated using "con:1"...

4CVSS6.2AI score0.10253EPSS
SaveExploits2References6
Prion
Prion
•added 2008/10/09 12:00 a.m.•23 views

Command injection

Serv-U 7.0.0.1 through 7.3, including 7.2.0.1, allows remote authenticated users to cause a denial of service CPU consumption via a crafted stou command, probably related to MS-DOS device names, as demonstrated using "con:1"...

4CVSS6.4AI score0.10253EPSS
SaveExploits2References6Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/10/08 12:00 a.m.•10 views

CVE-2008-4500: Improper Input Validation

Serv-U 7.0.0.1 through 7.3, including 7.2.0.1, allows remote authenticated users to cause a denial of service CPU consumption via a crafted stou command, probably related to MS-DOS device names, as demonstrated using "con:1"...

4CVSS5.8AI score0.10253EPSS
SaveExploits2References2
OpenVAS
OpenVAS
•added 2005/11/03 12:00 a.m.•66 views

Serv-U FTP 4.x 5.x DoS

It is possible to crash the remote FTP server by sending it a STOU command. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

5CVSS6.8AI score0.12352EPSS
SaveExploits2References1
Tenable Nessus
Tenable Nessus
•added 2004/09/13 12:00 a.m.•21 views

Serv-U FTP Server < 5.2.0.1 'STOU' Command Remote DoS

Binary data 2275.prm...

5CVSS7.3AI score0.12352EPSS
SaveExploits2References1
Rows per page
Query Builder