vulnwire
6.3med

CVE-2007-6741

Improper privilege management in pyftpdlib

Also known as GHSA-8xgx-75qw-6268, PYSEC-2010-25

Published 16 y ago · modified 4 mo ago · JSON

CVSS
6.3
v3.1 · GitHub
CISA KEV
No
not known exploited
EPSS
1.8%
percentile 78%
Public exploits
0
none known

The ftp_PORT function in FTPServer.py in pyftpdlib before 0.2.0 does not prevent TCP connections to privileged ports if the destination IP address matches the source IP address of the connection from the FTP client, which might allow remote authenticated users to conduct FTP bounce attacks via crafted FTP data, as demonstrated by an FTP bounce attack against a NAT server, a related issue to CVE-1999-0017.

Exploit prediction (EPSS)

1.75% probability of exploitation in the next 30 days, higher than 78% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.06.5AV:N/AC:L/Au:S/C:P/I:P/A:P
GitHub3.16.3CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Affected packages

EcosystemPackageAffectedFixed in
pypipyftpdlib
<0.2.0
0.2.0

Classification

Weakness
  • CWE-264 Permissions, Privileges, and Access Controls
  • CWE-269 Improper Privilege Management

References

  • code.google.com /p/pyftpdlib/source/browse/trunk/HISTORY · x_refsource_CONFIRM, x_transferred
  • code.google.com /p/pyftpdlib/issues/detail?id=11 · x_refsource_CONFIRM, x_transferred
  • code.google.com /p/pyftpdlib/source/detail?r=32 · x_refsource_CONFIRM, x_transferred
  • code.google.com /p/pyftpdlib/source/diff?spec=svn32&r=32&format=side&path=/trunk/pyftpdlib/FTPServer.py · x_refsource_CONFIRM, x_transferred
  • nvd.nist.gov /vuln/detail/CVE-2007-6741 · advisory
  • github.com /giampaolo/pyftpdlib/issues/11 · web
  • github.com /giampaolo/pyftpdlib · package
  • github.com /pypa/advisory-database/tree/main/vulns/pyftpdlib/PYSEC-2010-25.yaml · web
  • github.com /advisories/GHSA-8xgx-75qw-6268 · advisory

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.