The ftp_QUIT function in ftpserver.py in pyftpdlib before 0.5.0 allows remote authenticated users to cause a denial of service (file descriptor exhaustion and daemon outage) by sending a QUIT command during a disallowed data-transfer attempt.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| pyftpdlib(PyPI) | 0 | 0.5.0 | N/A |
CVSS Metrics
