CVE-2010-2073

Опубликовано: 16 июн. 2010

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

auth_db_config.py in Pyftpd 0.8.4 contains hard-coded usernames and passwords for the (1) test, (2) user, and (3) roxon accounts, which allows remote attackers to read arbitrary files from the FTP server.

Ссылки

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=585776
Mailing List
Patch
http://www.openwall.com/lists/oss-security/2010/06/13/2
Mailing List
http://www.securityfocus.com/bid/40839
Broken Link
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/59431
Third Party Advisory
VDB Entry
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=585776
Mailing List
Patch
http://www.openwall.com/lists/oss-security/2010/06/13/2
Mailing List
http://www.securityfocus.com/bid/40839
Broken Link
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/59431
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:debian:pyftpd:0.8.4:*:*:*:*:*:*:*

EPSS

Процентиль: 76%

0.00932

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-798

Связанные уязвимости

CVE-2010-2073

CVSS3: 7.5

ubuntu

больше 15 лет назад

CVE-2010-2073

CVSS3: 7.5

debian

больше 15 лет назад

auth_db_config.py in Pyftpd 0.8.4 contains hard-coded usernames and pa ...

GHSA-jwxq-72jg-xr6j

CVSS3: 7.5

github

больше 3 лет назад

EPSS

Процентиль: 76%

0.00932

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-798