CVE-2009-5010: Race Condition
Published Oct 19, 2010
·Updated
Race condition in the FTPHandler class in ftpserver.py in pyftpdlib before 0.5.1 allows remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the accept function having an unexpected return value of None, a different vulnerability than CVE-2010-3494.
Affected Software
7 affected componentsFixes available
pip/pyftpdlib<=0.5.0
0.5.1
G.rodola Pyftpdlib<=0.5.0
G.rodola Pyftpdlib=0.1
G.rodola Pyftpdlib=0.1.1
G.rodola Pyftpdlib=0.2.0
G.rodola Pyftpdlib=0.3.0
G.rodola Pyftpdlib=0.4.0
Remediation
Patch Available
Event History
Oct 19, 2010
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
May 2, 2022
Advisory Published
via GitHub·04:00 AM
Frequently Asked Questions
1
What is the severity of CVE-2009-5010?
CVE-2009-5010 has a moderate severity rating due to its potential to cause a denial of service.
2
How do I fix CVE-2009-5010?
To fix CVE-2009-5010, upgrade pyftpdlib to version 0.5.1 or later.
3
What type of vulnerability is CVE-2009-5010?
CVE-2009-5010 is a race condition vulnerability affecting the FTPHandler class in pyftpdlib.
4
Who is affected by CVE-2009-5010?
CVE-2009-5010 affects users of pyftpdlib versions up to 0.5.0.
5
What is the impact of CVE-2009-5010?
CVE-2009-5010 can lead to a daemon outage, causing disruption to FTP services.