Lucene search
K

11 matches found

OSV
OSV
added 2022/05/01 6:45 p.m.19 views

GHSA-CX59-CP6C-9FR8 pyftpdlib vulnerable to allocation of resources without limits

The ftpSTOU function in FTPServer.py in pyftpdlib before 0.2.0 does not limit the number of attempts to discover a unique filename, which might allow remote authenticated users to cause a denial of service via a STOU command...

7.1CVSS5.9AI score0.00513EPSS
Exploits0References9
Github Security Blog
Github Security Blog
added 2022/05/01 6:45 p.m.37 views

pyftpdlib vulnerable to allocation of resources without limits

The ftpSTOU function in FTPServer.py in pyftpdlib before 0.2.0 does not limit the number of attempts to discover a unique filename, which might allow remote authenticated users to cause a denial of service via a STOU command...

4CVSS4.4AI score0.00513EPSS
Exploits0References8Affected Software1
NVD
NVD
added 2010/10/19 8:0 p.m.18 views

CVE-2007-6740

The ftpSTOU function in FTPServer.py in pyftpdlib before 0.2.0 does not limit the number of attempts to discover a unique filename, which might allow remote authenticated users to cause a denial of service via a STOU command...

4CVSS6.1AI score0.00513EPSS
Exploits0References4
CVE
CVE
added 2010/10/19 7:0 p.m.63 views

CVE-2007-6740

CVE-2007-6740 affects pyftpdlib: FTPServer.py ftp_STOU does not limit attempts to find a unique filename, enabling remote authenticated users to cause a denial of service via STOU. Impact and fix: DoS via STOU as described; version before 0.2.0 is affected; upgrade to 0.2.0+ to remediate (exact p...

4CVSS6.2AI score0.00513EPSS
Exploits0References4Affected Software1
CVE
CVE
added 2010/04/05 3:15 p.m.52 views

CVE-2001-1587

Technical details (affected products, vulnerable component, impact, remediation) are not publicly provided in the supplied documents. Monitor for updates.

5CVSS6.9AI score0.01317EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2010/04/05 3:15 p.m.20 views

CVE-2001-1587

NWFTPD.nlm before 5.01w in the FTP server in Novell NetWare allows remote attackers to cause a denial of service abend via an anonymous STOU command...

6.6AI score0.01317EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2008/10/14 12:0 a.m.18 views

Serv-U File Renaming Directory Traversal and 'STOU' DoS Vulnerabilities

The host is running Serv-U FTP Server, which is prone to Directory Traversal and Denial of Service Vulnerabilities. The flaws are due to, - error in handling 'STOU' FTP command. It can exhaust available CPU resources when exploited through a specially crafted argument vaule. - input validation...

0.4AI score
Exploits0References3
NVD
NVD
added 2008/10/09 12:0 a.m.11 views

CVE-2008-4500

Serv-U 7.0.0.1 through 7.3, including 7.2.0.1, allows remote authenticated users to cause a denial of service CPU consumption via a crafted stou command, probably related to MS-DOS device names, as demonstrated using "con:1"...

4CVSS6.2AI score0.1006EPSS
Exploits1References6
Prion
Prion
added 2008/10/09 12:0 a.m.9 views

Command injection

Serv-U 7.0.0.1 through 7.3, including 7.2.0.1, allows remote authenticated users to cause a denial of service CPU consumption via a crafted stou command, probably related to MS-DOS device names, as demonstrated using "con:1"...

4CVSS6.4AI score0.1006EPSS
Exploits1References6Affected Software1
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.51 views

Serv-U FTP 4.x 5.x DoS

It is possible to crash the remote FTP server by sending it a STOU command. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

5CVSS6.8AI score0.06509EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2004/09/13 12:0 a.m.13 views

Serv-U FTP Server < 5.2.0.1 'STOU' Command Remote DoS

Binary data 2275.prm...

5CVSS7.3AI score0.06509EPSS
Exploits1References1
Rows per page
Query Builder