This host is running pyftpdlib FTP server and is prone to multiple vulnerabilities.

Successful exploitation will allow attacker to cause a denial of service. Impact Level: Application

Upgrade to pyftpdlib version 0.5.2 or later, For updates refer to http://code.google.com/p/pyftpdlib/downloads/list

- ftpserver.py in pyftpdlib does not delay its response after receiving an invalid login attempt, which makes it easier for remote attackers to obtain access via a brute-force attack. - ftp_QUIT function allows remote authenticated users to cause a denial of service by sending a QUIT command during a disallowed data-transfer attempt.

ftpserver.py in pyftpdlib before 0.5.0

• http://code.google.com/p/pyftpdlib/issues/detail?id=71
• http://code.google.com/p/pyftpdlib/issues/detail?id=73
• http://code.google.com/p/pyftpdlib/source/browse/trunk/HISTORY

---

Updated on 2015-03-25