CVE-2007-6741
Current Description
The ftp_PORT function in FTPServer.py in pyftpdlib before 0.2.0 does not prevent TCP connections to privileged ports if the destination IP address matches the source IP address of the connection from the FTP client, which might allow remote authenticated users to conduct FTP bounce attacks via crafted FTP data, as demonstrated by an FTP bounce attack against a NAT server, a related issue to CVE-1999-0017.
Basic Data
| Published | October 19, 2010 |
|---|
| Last Modified | October 20, 2010 |
|---|
| Assigner | cve@mitre.org |
|---|
| Data Type | CVE |
|---|
| Data Format | MITRE |
|---|
| Data Version | 4.0 |
|---|
| Problem Type | CWE-264 |
|---|
| CVE Data Version | 4.0 |
|---|
Base Metric V2
| CVSS 2 - Version | 2.0 |
|---|
| CVSS 2 - Vector String | AV:N/AC:L/Au:S/C:P/I:P/A:P |
|---|
| CVSS 2 - Access Vector | NETWORK |
|---|
| CVSS 2 - Access Complexity | LOW |
|---|
| CVSS 2 - Authentication | SINGLE |
|---|
| CVSS 2 - Confidentiality Impact | PARTIAL |
|---|
| CVSS 2 - Availability Impact | PARTIAL |
|---|
| CVSS 2 - Base Score | 6.5 |
|---|
| Severity | MEDIUM |
|---|
| Exploitability Score | 8.0 |
|---|
| Impact Score | 6.4 |
|---|
| Obtain All Privilege | false |
|---|
| Obtain User Privilege | false |
|---|
| Obtain Other Privilege | false |
|---|
Base Metric V3
No data provided.
Configurations
-
OR - Configuration 1
| Cpe Version | Part | Vendor | Product | Version | Update | Edition | Language | SW Edition | Target SW | Target HW | Other | Version Start Including | Version End Including | Version Start Excluding | Version End Excluding |
|---|
| 2.3 | Application | G.rodola | Pyftpdlib | 0.1 | * | * | * | * | * | * | * | | | | |
| 2.3 | Application | G.rodola | Pyftpdlib | * | * | * | * | * | * | * | * | | 0.1.1 | | |
Vulnerable Software List
References
| Name | Source | URL | Tags |
|---|
| http://code.google.com/p/pyftpdlib/issues/detail?id=11 | http://code.google.com/p/pyftpdlib/issues/detail?id=11 | CONFIRM | |
| http://code.google.com/p/pyftpdlib/source/browse/trunk/HISTORY | http://code.google.com/p/pyftpdlib/source/browse/trunk/HISTORY | CONFIRM | |
| http://code.google.com/p/pyftpdlib/source/detail?r=32 | http://code.google.com/p/pyftpdlib/source/detail?r=32 | CONFIRM | |
| http://code.google.com/p/pyftpdlib/source/diff?spec=svn32&r=32&format=side&path=/trunk/pyftpdlib/FTPServer.py | http://code.google.com/p/pyftpdlib/source/diff?spec=svn32&r=32&format=side&path=/trunk/pyftpdlib/FTP | CONFIRM | |
Follow @discotekdotca