CVE-2007-6738 pyftpdlib Use of Insufficiently Random Values of port selection on PASV command
Remote attackers can infer the number of active data connections by observing predictable PASV port responses in pyftpdlib.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2007-6738?
CVE-2007-6738 is a medium-severity vulnerability in n/a, published on 19 Oct 2010. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
pyftpdlib before 0.1.1 does not choose a random value for the port associated with the PASV command, which makes it easier for remote attackers to obtain potentially sensitive information about the number of in-progress data connections by reading the response to this command.
Which versions are affected by CVE-2007-6738?
3 open source packages ship an affected version, including pyftpdlib. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
pyftpdlib PyPI | All versions | 0.1.1 |
pyftpdlib PyPI | All versions | 0.1.1 |
pyftpdlib PyPI | All versions | 0.1.1 |
Products include G.rodola Pyftpdlib.
How do I fix CVE-2007-6738?
Upgrade pyftpdlib to 0.1.1 or later.
Is CVE-2007-6738 being exploited?
There is no known exploitation of CVE-2007-6738 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-gh7c-cg3x-pmcr, PYSEC-2010-22.