CVE-2009-5011: Race Condition
Published Oct 19, 2010
·Updated
Race condition in the FTPHandler class in ftpserver.py in pyftpdlib before 0.5.2 allows remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the getpeername function having an ENOTCONN error, a different vulnerability than CVE-2010-3494.
Affected Software
8 affected componentsFixes available
pip/pyftpdlib<=0.5.1
0.5.2
G.rodola Pyftpdlib<=0.5.1
G.rodola Pyftpdlib=0.1
G.rodola Pyftpdlib=0.1.1
G.rodola Pyftpdlib=0.2.0
G.rodola Pyftpdlib=0.3.0
G.rodola Pyftpdlib=0.4.0
G.rodola Pyftpdlib=0.5.0
Event History
Oct 19, 2010
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Data Sourced
via NVD·08:00 PM
DescriptionSeverityWeaknessAffected Software
May 2, 2022
Advisory Published
via GitHub·04:00 AM
Frequently Asked Questions
1
What is the severity of CVE-2009-5011?
CVE-2009-5011 has a severity rating that categorizes it as a denial of service vulnerability.
2
How do I fix CVE-2009-5011?
To fix CVE-2009-5011, upgrade pyftpdlib to version 0.5.2 or later.
3
What versions of pyftpdlib are affected by CVE-2009-5011?
CVE-2009-5011 affects all versions of pyftpdlib prior to 0.5.2.
4
What specific issue does CVE-2009-5011 cause in pyftpdlib?
CVE-2009-5011 causes a race condition leading to a denial of service due to TCP connection handling.
5
Who can exploit CVE-2009-5011?
Remote attackers can exploit CVE-2009-5011 by establishing and immediately closing TCP connections.