CVE-2007-6741: Medium severity G.rodola Pyftpdlib vulnerability
The ftpPORT function in FTPServer.py in pyftpdlib before 0.2.0 does not prevent TCP connections to privileged ports if the destination IP address matches the source IP address of the connection from the FTP client, which might allow remote authenticated users to conduct FTP bounce attacks via crafted FTP data, as demonstrated by an FTP bounce attack against a NAT server, a related issue to CVE-1999-0017.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-6741?
CVE-2007-6741 is considered a medium severity vulnerability based on its potential to allow FTP bounce attacks.
How do I fix CVE-2007-6741?
To fix CVE-2007-6741, upgrade to pyftpdlib version 0.2.0 or later.
What is the vulnerability type of CVE-2007-6741?
CVE-2007-6741 is classified as a denial-of-service and security restriction bypass vulnerability.
Who is affected by CVE-2007-6741?
Users of pyftpdlib versions prior to 0.2.0 are affected by CVE-2007-6741.
What attack vector is associated with CVE-2007-6741?
CVE-2007-6741 may be exploited through authenticated FTP clients conducting FTP bounce attacks.