ID de Prueba:	1.3.6.1.4.1.25623.1.0.801618
Categoría:	FTP
Título:	pyftpdlib FTP Server Information Disclosure Vulnerability
Resumen:	pyftpdlib FTP server is prone to an information disclosure vulnerability.
Descripción:	Summary: pyftpdlib FTP server is prone to an information disclosure vulnerability. Vulnerability Insight: The flaw exists because pyftpdlib does not choose a random value for the port associated with the PASV command, which makes it easier for remote attackers to obtain potentially sensitive information about the number of in-progress data connections by reading the response to this command. Vulnerability Impact: Successful exploitation will allow attacker to obtain potentially sensitive information about the number of in-progress data connections. Affected Software/OS: ftpserver.py in pyftpdlib before 0.1.1 Solution: Upgrade to pyftpdlib version 0.5.2 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2007-6738
Copyright	Copyright (C) 2010 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.