CVE-2008-7263: High severity pyftpdlib vulnerability
Published Oct 19, 2010
·Updated
ftpserver.py in pyftpdlib before 0.5.0 does not delay its response after receiving an invalid login attempt, which makes it easier for remote attackers to obtain access via a brute-force attack.
Affected Software
6 affected componentsFixes available
pip/pyftpdlib<0.5.0
0.5.0
G.rodola Pyftpdlib<=0.4.0
G.rodola Pyftpdlib=0.1
G.rodola Pyftpdlib=0.1.1
G.rodola Pyftpdlib=0.2.0
G.rodola Pyftpdlib=0.3.0
Event History
Oct 19, 2010
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
May 17, 2022
Advisory Published
via GitHub·05:47 AM
Frequently Asked Questions
1
What is the severity of CVE-2008-7263?
CVE-2008-7263 is considered to be of medium severity due to its potential for exploitation via brute-force attacks.
2
How do I fix CVE-2008-7263?
To fix CVE-2008-7263, upgrade pyftpdlib to version 0.5.0 or later.
3
What type of attack does CVE-2008-7263 expose systems to?
CVE-2008-7263 exposes systems to brute-force attacks due to lack of response delay after invalid login attempts.
4
Which versions of pyftpdlib are affected by CVE-2008-7263?
CVE-2008-7263 affects all versions of pyftpdlib prior to 0.5.0.
5
Is CVE-2008-7263 a client-side or server-side vulnerability?
CVE-2008-7263 is a server-side vulnerability affecting the pyftpdlib FTP server.