CVE-2008-7262

pyftpdlib < 0.3.0 - Authenticated Path Traversal via CWD DELE STOR or RETR Command

Title source: llm
STIX 2.1

Description

Multiple directory traversal vulnerabilities in FTPServer.py in pyftpdlib before 0.3.0 allow remote authenticated users to access arbitrary files and directories via vectors involving a symlink in a pathname to a (1) CWD, (2) DELE, (3) STOR, or (4) RETR command.

References (2)

Core 2
Core References
Issue Tracking x_refsource_confirm
http://code.google.com/p/pyftpdlib/issues/detail?id=55

Scores

EPSS 0.0141
EPSS Percentile 69.5%

Details

CWE
CWE-22
Status published
Products (4)
g.rodola/pyftpdlib 0.1
g.rodola/pyftpdlib 0.1.1
g.rodola/pyftpdlib < 0.2.0
pypi/pyftpdlib 0 - 0.3.0PyPI
Published Oct 19, 2010
Tracked Since Feb 18, 2026