CVE-2009-5011

Race condition in the FTPHandler class in ftpserver.py in pyftpdlib before 0.5.2 allows remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the getpeername function having an ENOTCONN error, a different vulnerability than CVE-2010-3494.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:g.rodola:pyftpdlib:*:*:*:*:*:*:*:*
cpe:2.3:a:g.rodola:pyftpdlib:0.1:*:*:*:*:*:*:*
cpe:2.3:a:g.rodola:pyftpdlib:0.1.1:*:*:*:*:*:*:*
cpe:2.3:a:g.rodola:pyftpdlib:0.2.0:*:*:*:*:*:*:*
cpe:2.3:a:g.rodola:pyftpdlib:0.3.0:*:*:*:*:*:*:*
cpe:2.3:a:g.rodola:pyftpdlib:0.4.0:*:*:*:*:*:*:*
cpe:2.3:a:g.rodola:pyftpdlib:0.5.0:*:*:*:*:*:*:*

History

No history.

Information

Published : 2010-10-19 20:00

Updated : 2024-02-04 17:54


NVD link : CVE-2009-5011

Mitre link : CVE-2009-5011

CVE.ORG link : CVE-2009-5011


JSON object : View

Products Affected

g.rodola

  • pyftpdlib
CWE
CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')