CVE-2007-6736: Path Traversal
Multiple directory traversal vulnerabilities in FTPServer.py in pyftpdlib before 0.2.0 allow remote authenticated users to access arbitrary files and directories via a .. (dot dot) in a (1) LIST, (2) STOR, or (3) RETR command.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-6736?
The severity of CVE-2007-6736 is considered high due to the potential for remote authenticated users to access unauthorized files.
How do I fix CVE-2007-6736?
To fix CVE-2007-6736, upgrade to pyftpdlib version 0.2.0 or later.
What are the attack vectors for CVE-2007-6736?
The attack vectors for CVE-2007-6736 include the LIST, STOR, and RETR commands where a '..' (dot dot) can be used for directory traversal.
Who is affected by CVE-2007-6736?
CVE-2007-6736 affects remote authenticated users of the pyftpdlib versions prior to 0.2.0.
What type of vulnerability is CVE-2007-6736?
CVE-2007-6736 is a directory traversal vulnerability allowing access to arbitrary files and directories.