CVE-2008-7262: Path Traversal
Multiple directory traversal vulnerabilities in FTPServer.py in pyftpdlib before 0.3.0 allow remote authenticated users to access arbitrary files and directories via vectors involving a symlink in a pathname to a (1) CWD, (2) DELE, (3) STOR, or (4) RETR command.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-7262?
CVE-2008-7262 is classified as a medium-severity vulnerability due to its potential to allow authenticated users to access sensitive files.
How do I fix CVE-2008-7262?
To fix CVE-2008-7262, upgrade the pyftpdlib package to version 0.3.0 or later.
Who is affected by CVE-2008-7262?
CVE-2008-7262 affects users running pyftpdlib versions prior to 0.3.0, including versions 0.1, 0.1.1, and 0.2.0.
What are the implications of exploiting CVE-2008-7262?
Exploiting CVE-2008-7262 may allow an authenticated attacker to read or manipulate arbitrary files on the server.
Are there any workarounds for CVE-2008-7262?
As a workaround for CVE-2008-7262, you can restrict user permissions and limit access to sensitive files until the software is updated.