Summary
This host is running pyftpdlib FTP server and is prone to multiple directory traversal vulnerabilities.
Impact
Successful exploitation will allow attacker to retrieve or upload arbitrary system files.
Impact Level: Application/System
Solution
Upgrade to pyftpdlib version 0.5.2 or later,
For updates refer to http://code.google.com/p/pyftpdlib/downloads/list
Insight
The flaws exist because pyftpdlib allow remote authenticated users to access arbitrary files and directories via vectors involving a symlink in a pathname to a CWD, DELE, STOR, or RETR command.
Affected
ftpserver.py in pyftpdlib before 0.3.0
References
Severity
Classification
-
CVE CVE-2008-7262 -
CVSS Base Score: 6.5
AV:N/AC:L/Au:S/C:P/I:P/A:P
Related Vulnerabilities