CVE-2007-6740: Medium severity pyftpdlib vulnerability
Published Oct 19, 2010
·Updated
The ftpSTOU function in FTPServer.py in pyftpdlib before 0.2.0 does not limit the number of attempts to discover a unique filename, which might allow remote authenticated users to cause a denial of service via a STOU command.
Affected Software
3 affected componentsFixes available
pip/pyftpdlib<0.2.0
0.2.0
G.rodola Pyftpdlib<=0.1.1
G.rodola Pyftpdlib=0.1
Event History
Oct 19, 2010
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
May 1, 2022
Advisory Published
via GitHub·06:45 PM
Frequently Asked Questions
1
What is the severity of CVE-2007-6740?
CVE-2007-6740 has a severity rating that can lead to a denial of service due to the lack of limits on filename discovery attempts.
2
How do I fix CVE-2007-6740?
To fix CVE-2007-6740, upgrade pyftpdlib to version 0.2.0 or later.
3
Who is affected by CVE-2007-6740?
CVE-2007-6740 affects users of pyftpdlib versions prior to 0.2.0, particularly those running FTPServer.py.
4
What does CVE-2007-6740 exploit?
CVE-2007-6740 exploits the ftp_STOU function's inability to limit filename discovery attempts, allowing denial of service.
5
Is CVE-2007-6740 remote or local?
CVE-2007-6740 is a remote vulnerability that can be exploited by authenticated users.