CVE-2010-2073: High severity debian pyftpd vulnerability
authdbconfig.py in Pyftpd 0.8.4 contains hard-coded usernames and passwords for the (1) test, (2) user, and (3) roxon accounts, which allows remote attackers to read arbitrary files from the FTP server.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-2073?
CVE-2010-2073 is considered a high severity vulnerability due to its potential for remote exploitation that allows unauthorized access to FTP server files.
How do I fix CVE-2010-2073?
To fix CVE-2010-2073, upgrade Pyftpd to a version that no longer contains hard-coded credentials or implement access controls to restrict unauthorized access.
What are the implications of CVE-2010-2073 for my FTP server?
The implications of CVE-2010-2073 include the risk of unauthorized file access which can lead to data breaches and compromise of sensitive information.
What accounts are affected by CVE-2010-2073?
CVE-2010-2073 affects hard-coded accounts including 'test', 'user', and 'roxon' which can be exploited by attackers.
In which software is CVE-2010-2073 found?
CVE-2010-2073 is found in Pyftpd version 0.8.4.