CVE-2010-2072
Pyftpd 0.8.4 creates log files with predictable names in a temporary directory, which allows local users to cause a denial of service and obtain sensitive information.
- Score
- CVSS 2.0 3.6 Low
- Status
- Modified - secalert@redhat.com
- Published
- 2010-06-16
- Last modified
- 2024-08-07
- Weaknesses
- CWE-310
Affected products
References
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=585773
- http://www.openwall.com/lists/oss-security/2010/06/13/1
- http://www.securityfocus.com/bid/40842
- https://exchange.xforce.ibmcloud.com/vulnerabilities/59429
