CVE-2010-3494: Race Condition
Race condition in the FTPHandler class in ftpserver.py in pyftpdlib before 0.5.2 allows remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the accept function having an unexpected value of None for the address, or an ECONNABORTED, EAGAIN, or EWOULDBLOCK error, a related issue to CVE-2010-3492.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-3494?
CVE-2010-3494 has a moderate severity rating as it causes a denial of service by crashing the FTP server.
How do I fix CVE-2010-3494?
To fix CVE-2010-3494, upgrade pyftpdlib to version 0.5.2 or later.
Which versions of pyftpdlib are affected by CVE-2010-3494?
CVE-2010-3494 affects pyftpdlib versions prior to 0.5.2.
What is the impact of CVE-2010-3494 on my server?
CVE-2010-3494 can cause your FTP server to become unresponsive, leading to service outages.
Is CVE-2010-3494 an exploit that can be remotely triggered?
Yes, CVE-2010-3494 can be exploited by remote attackers who can establish and immediately close TCP connections.