Back to feed
EUVD-2010-0025 · Published May 2, 2022
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in pyftpdlib Race condition in the FTPHandler class in ftpserver.py in pyftpdlib before 0.5.1 allows remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the accept function having an unexpected return value of None, a different vulnerability than CVE-2010-3494.
Technologies
G.Rodola PyftpdlibPyftpdlib Pyftpdlib
Weaknesses
CWE-362
References
- http://bugs.python.org/issue6706
- http://code.google.com/p/pyftpdlib/issues/detail?id=91
- http://code.google.com/p/pyftpdlib/source/browse/trunk/HISTORY
- http://code.google.com/p/pyftpdlib/source/detail?r=439
- http://code.google.com/p/pyftpdlib/source/diff?spec=svn439&r=439&format=side&path=/trunk/pyftpdlib/ftpserver.py
- http://www.openwall.com/lists/oss-security/2010/09/09/6
Potentially impacted assets
See if this affects your attack surface
