deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2010-3580
Published: 2010-10-14
Description: Unspecified vulnerability in Oracle OpenSolaris allows local users to affect availability via unknown vectors related to Kernel/File System.
CVSS Score: 4.6 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.us-cert.gov/cas/techalerts/TA10-287A.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-3581
Published: 2010-10-14
Description: Unspecified vulnerability in the BPEL Console component in Oracle Fusion Middleware 11.1.1.1.0 and 11.1.1.2.0 allows remote authenticated users to affect integrity via unknown vectors.
CVSS Score: 3.5 (LOW)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.us-cert.gov/cas/techalerts/TA10-287A.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-3582
Published: 2010-10-14
Description: Unspecified vulnerability in the OracleVM component in Oracle VM 2.2.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to ovs-agent.
CVSS Score: 9.0 (HIGH)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.us-cert.gov/cas/techalerts/TA10-287A.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-3583
Published: 2010-10-14
Description: Unspecified vulnerability in the OracleVM component in Oracle VM 2.2.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to ovs-agent. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a third party researcher that this is related to the exposure of multiple unspecified functions through XML-RPC that allow execution of arbitrary OS commands.
CVSS Score: 9.0 (HIGH)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.securityfocus.com/archive/1/514613/100/0/threaded; http://www.us-cert.gov/cas/techalerts/TA10-287A.html
CVE: CVE-2010-3584
Published: 2010-10-14
Description: Unspecified vulnerability in the Oracle VM component in Oracle VM 2.2.1 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to ovs-agent.  NOTE: the previous information was obtained from the October 2010 CPU.  Oracle has not commented on claims from a third party researcher that this is related to the storage of passwords and password hashes in cleartext in files with insecure permissions.
CVSS Score: 4.3 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.securityfocus.com/archive/1/514612/100/0/threaded; http://www.us-cert.gov/cas/techalerts/TA10-287A.html
CVE: CVE-2010-3585
Published: 2010-10-14
Description: Unspecified vulnerability in the OracleVM component in Oracle VM 2.2.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to ovs-agent. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a third party researcher that this is related to the exposure of unspecified functions using XML-RPC.
CVSS Score: 9.0 (HIGH)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.securityfocus.com/archive/1/514611/100/0/threaded; http://www.us-cert.gov/cas/techalerts/TA10-287A.html
CVE: CVE-2010-3934
Published: 2010-10-14
Description: The browser in Research In Motion (RIM) BlackBerry Device Software 5.0.0.593 Platform 5.1.0.147 on the BlackBerry 9700 does not properly restrict cross-domain execution of JavaScript, which allows remote attackers to bypass the Same Origin Policy via vectors related to a window.open call and an IFRAME element.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-264
References: http://packetstormsecurity.org/1009-exploits/blackberry-crossorigin.txt; http://secunia.com/advisories/41536; http://securitytracker.com/id?1024506
CVE: CVE-2009-5005
Published: 2010-10-18
Description: The Cluster::deliveredEvent function in cluster/Cluster.cpp in Apache Qpid, as used in Red Hat Enterprise MRG before 1.3 and other products, allows remote attackers to cause a denial of service (daemon crash and cluster outage) via invalid AMQP data.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/41710; http://secunia.com/advisories/41812; http://svn.apache.org/viewvc?revision=785788&view=revision
CVE: CVE-2009-5006
Published: 2010-10-18
Description: The SessionAdapter::ExchangeHandlerImpl::checkAlternate function in broker/SessionAdapter.cpp in the C++ Broker component in Apache Qpid before 0.6, as used in Red Hat Enterprise MRG before 1.3 and other products, allows remote authenticated users to cause a denial of service (NULL pointer dereference, daemon crash, and cluster outage) by attempting to modify the alternate of an exchange.
CVSS Score: 4.0 (MEDIUM)
References: http://secunia.com/advisories/41710; http://secunia.com/advisories/41812; http://svn.apache.org/viewvc?revision=811188&view=revision
CVE: CVE-2010-0219
Published: 2010-10-18
Description: Apache Axis2, as used in dswsbobje.war in SAP BusinessObjects Enterprise XI 3.2, CA ARCserve D2D r15, and other products, has a default password of axis2 for the admin account, which makes it easier for remote attackers to execute arbitrary code by uploading a crafted web service.
CVSS Score: 10.0 (HIGH)
CWE: CWE-255
References: http://retrogod.altervista.org/9sg_ca_d2d.html; http://secunia.com/advisories/41799; http://secunia.com/advisories/42763
CVE: CVE-2010-2368
Published: 2010-10-18
Description: Untrusted search path vulnerability in Lhaplus before 1.58 allows local users to gain privileges via a Trojan horse DLL in the current working directory.
CVSS Score: 6.9 (MEDIUM)
References: http://jvn.jp/en/jp/JVN82752978/index.html; http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000037.html; http://secunia.com/advisories/41742
CVE: CVE-2010-2369
Published: 2010-10-18
Description: Untrusted search path vulnerability in Lhasa 0.19 and earlier allows local users to gain privileges via a Trojan horse executable file in the current working directory.
CVSS Score: 6.9 (MEDIUM)
References: http://jvn.jp/en/jp/JVN88850043/index.html; http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000038.html; http://www.ipa.go.jp/about/press/20101012_2.html
CVE: CVE-2010-3286
Published: 2010-10-18
Description: Unspecified vulnerability in HP Systems Insight Manager (SIM) 6.0 and 6.1 allows remote attackers to read arbitrary files via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6760&w=2; http://www.securitytracker.com/id?1024575; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6760&w=2
CVE: CVE-2010-3287
Published: 2010-10-18
Description: Unspecified vulnerability on HP ProCurve Access Points, Access Controllers, and Mobility Controllers with software 5.1.x through 5.1.9, 5.2.x through 5.2.7, 5.3.x through 5.3.5, and 5.4.x through 5.4.0 allows remote attackers to execute arbitrary code via unknown vectors.
CVSS Score: 8.3 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3203&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3203&w=2
CVE: CVE-2010-3841
Published: 2010-10-18
Description: Multiple cross-site scripting (XSS) vulnerabilities in lib/TWiki.pm in TWiki before 5.0.1 allow remote attackers to inject arbitrary web script or HTML via (1) the rev parameter to the view script or (2) the query string to the login script.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/41796; http://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2010-3841; http://www.securityfocus.com/bid/44103
CVE: CVE-2010-3979
Published: 2010-10-18
Description: Dswsbobje in SAP BusinessObjects Enterprise XI 3.2 generates different error messages depending on whether the Login field corresponds to a valid username, which allows remote attackers to enumerate account names via a login SOAPAction to the dswsbobje/services/session URI.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://spl0it.org/files/talks/source_barcelona10/Hacking%20SAP%20BusinessObjects.pdf; http://spl0it.org/files/talks/source_barcelona10/Hacking%20SAP%20BusinessObjects.pdf
CVE: CVE-2010-3980
Published: 2010-10-18
Description: Dswsbobje in SAP BusinessObjects Enterprise XI 3.2 does not limit the number of CUIDs that may be requested, which allows remote authenticated users to cause a denial of service via a large numCuids value in a GenerateCuids SOAPAction to the dswsbobje/services/biplatform URI.
CVSS Score: 4.0 (MEDIUM)
References: http://spl0it.org/files/talks/source_barcelona10/Hacking%20SAP%20BusinessObjects.pdf; http://spl0it.org/files/talks/source_barcelona10/Hacking%20SAP%20BusinessObjects.pdf
CVE: CVE-2010-3981
Published: 2010-10-18
Description: Cross-site scripting (XSS) vulnerability in SAP BusinessObjects Enterprise XI 3.2 allows remote attackers to inject arbitrary web script or HTML via the ServiceClass field to the Edit Service Parameters page.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/68680; http://spl0it.org/files/talks/source_barcelona10/Hacking%20SAP%20BusinessObjects.pdf; http://osvdb.org/68680
CVE: CVE-2010-3982
Published: 2010-10-18
Description: SAP BusinessObjects Enterprise XI 3.2 allows remote attackers to trigger TCP connections to arbitrary intranet hosts on any port, and obtain potentially sensitive information about open ports, via the apstoken parameter to the CrystalReports/viewrpt.cwr URI, related to an "internal port scanning" issue.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://osvdb.org/68681; http://spl0it.org/files/talks/source_barcelona10/Hacking%20SAP%20BusinessObjects.pdf; https://exchange.xforce.ibmcloud.com/vulnerabilities/62682
CVE: CVE-2010-3983
Published: 2010-10-18
Description: CmcApp in SAP BusinessObjects Enterprise XI 3.2 allows remote authenticated users to gain privileges via vectors involving the Program Job Server and the Program Login property.
CVSS Score: 9.0 (HIGH)
CWE: CWE-264
References: http://osvdb.org/68682; http://spl0it.org/files/talks/source_barcelona10/Hacking%20SAP%20BusinessObjects.pdf; http://osvdb.org/68682
CVE: CVE-2010-2578
Published: 2010-10-19
Description: Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, and RealPlayer Enterprise 2.1.2 allows remote attackers to have an unspecified impact via a crafted QCP file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://service.real.com/realplayer/security/10152010_player/en/; http://www.securityfocus.com/bid/44144; http://service.real.com/realplayer/security/10152010_player/en/
CVE: CVE-2010-2998
Published: 2010-10-19
Description: Array index error in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.0.1 allows remote attackers to execute arbitrary code via malformed sample data in a RealMedia .IVR file, related to a "malformed IVR pointer index" issue.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://service.real.com/realplayer/security/10152010_player/en/; http://www.securityfocus.com/bid/44144; http://www.zerodayinitiative.com/advisories/ZDI-10-209/
CVE: CVE-2010-3747
Published: 2010-10-19
Description: An ActiveX control in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, and RealPlayer Enterprise 2.1.2 does not properly initialize an unspecified object component during parsing of a CDDA URI, which allows remote attackers to execute arbitrary code or cause a denial of service (uninitialized pointer dereference and application crash) via a long URI.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://securityreason.com/securityalert/8147; http://service.real.com/realplayer/security/10152010_player/en/; http://www.securityfocus.com/bid/44144
CVE: CVE-2010-3748
Published: 2010-10-19
Description: Stack-based buffer overflow in the RichFX component in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, and RealPlayer Enterprise 2.1.2 allows remote attackers to have an unspecified impact via unknown vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://service.real.com/realplayer/security/10152010_player/en/; http://www.securityfocus.com/bid/44144; http://service.real.com/realplayer/security/10152010_player/en/
CVE: CVE-2010-3749
Published: 2010-10-19
Description: The browser-plugin implementation in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1 allows remote attackers to arguments to the RecordClip method, which allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via a " (double quote) in an argument to the RecordClip method, aka "parameter injection."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://service.real.com/realplayer/security/10152010_player/en/; http://www.exploit-db.com/exploits/15991; http://www.securityfocus.com/bid/44144
CVE: CVE-2010-3750
Published: 2010-10-19
Description: rjrmrpln.dll in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, and RealPlayer Enterprise 2.1.2 does not properly validate file contents that are used during interaction with a heap buffer, which allows remote attackers to execute arbitrary code via crafted Name Value Property (NVP) elements in logical streams in a media file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://service.real.com/realplayer/security/10152010_player/en/; http://www.securityfocus.com/bid/44144; http://www.zerodayinitiative.com/advisories/ZDI-10-212/
CVE: CVE-2010-3751
Published: 2010-10-19
Description: Multiple heap-based buffer overflows in an ActiveX control in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 allow remote attackers to execute arbitrary code via a long .smil argument to the (1) tfile, (2) pnmm, or (3) cdda protocol handler.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://service.real.com/realplayer/security/10152010_player/en/; http://www.securityfocus.com/bid/44144; http://www.zerodayinitiative.com/advisories/ZDI-10-213/
CVE: CVE-2007-6736
Published: 2010-10-19
Description: Multiple directory traversal vulnerabilities in FTPServer.py in pyftpdlib before 0.2.0 allow remote authenticated users to access arbitrary files and directories via a .. (dot dot) in a (1) LIST, (2) STOR, or (3) RETR command.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: http://code.google.com/p/pyftpdlib/issues/detail?id=9; http://code.google.com/p/pyftpdlib/source/browse/trunk/HISTORY; http://code.google.com/p/pyftpdlib/source/detail?r=16
CVE: CVE-2007-6737
Published: 2010-10-19
Description: FTPServer.py in pyftpdlib before 0.2.0 does not increment the attempted_logins count for a USER command that specifies an invalid username, which makes it easier for remote attackers to obtain access via a brute-force attack.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://code.google.com/p/pyftpdlib/issues/detail?id=20; http://code.google.com/p/pyftpdlib/source/browse/trunk/HISTORY; http://code.google.com/p/pyftpdlib/source/detail?r=23
CVE: CVE-2007-6738
Published: 2010-10-19
Description: pyftpdlib before 0.1.1 does not choose a random value for the port associated with the PASV command, which makes it easier for remote attackers to obtain potentially sensitive information about the number of in-progress data connections by reading the response to this command.
CVSS Score: 5.0 (MEDIUM)
References: http://code.google.com/p/pyftpdlib/source/browse/trunk/HISTORY; http://code.google.com/p/pyftpdlib/source/browse/trunk/HISTORY
CVE: CVE-2007-6739
Published: 2010-10-19
Description: FTPServer.py in pyftpdlib before 0.2.0 allows remote attackers to cause a denial of service via a long command.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://code.google.com/p/pyftpdlib/issues/detail?id=3; http://code.google.com/p/pyftpdlib/source/browse/trunk/HISTORY; http://code.google.com/p/pyftpdlib/source/detail?r=20
CVE: CVE-2007-6740
Published: 2010-10-19
Description: The ftp_STOU function in FTPServer.py in pyftpdlib before 0.2.0 does not limit the number of attempts to discover a unique filename, which might allow remote authenticated users to cause a denial of service via a STOU command.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-264
References: http://code.google.com/p/pyftpdlib/issues/detail?id=25; http://code.google.com/p/pyftpdlib/source/browse/trunk/HISTORY; http://code.google.com/p/pyftpdlib/source/detail?r=37
CVE: CVE-2007-6741
Published: 2010-10-19
Description: The ftp_PORT function in FTPServer.py in pyftpdlib before 0.2.0 does not prevent TCP connections to privileged ports if the destination IP address matches the source IP address of the connection from the FTP client, which might allow remote authenticated users to conduct FTP bounce attacks via crafted FTP data, as demonstrated by an FTP bounce attack against a NAT server, a related issue to CVE-1999-0017.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-264
References: http://code.google.com/p/pyftpdlib/issues/detail?id=11; http://code.google.com/p/pyftpdlib/source/browse/trunk/HISTORY; http://code.google.com/p/pyftpdlib/source/detail?r=32
CVE: CVE-2008-7262
Published: 2010-10-19
Description: Multiple directory traversal vulnerabilities in FTPServer.py in pyftpdlib before 0.3.0 allow remote authenticated users to access arbitrary files and directories via vectors involving a symlink in a pathname to a (1) CWD, (2) DELE, (3) STOR, or (4) RETR command.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: http://code.google.com/p/pyftpdlib/issues/detail?id=55; http://code.google.com/p/pyftpdlib/source/browse/trunk/HISTORY; http://code.google.com/p/pyftpdlib/issues/detail?id=55
CVE: CVE-2008-7263
Published: 2010-10-19
Description: ftpserver.py in pyftpdlib before 0.5.0 does not delay its response after receiving an invalid login attempt, which makes it easier for remote attackers to obtain access via a brute-force attack.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://code.google.com/p/pyftpdlib/issues/detail?id=73; http://code.google.com/p/pyftpdlib/source/browse/trunk/HISTORY; http://code.google.com/p/pyftpdlib/source/detail?r=348
CVE: CVE-2008-7264
Published: 2010-10-19
Description: The ftp_QUIT function in ftpserver.py in pyftpdlib before 0.5.0 allows remote authenticated users to cause a denial of service (file descriptor exhaustion and daemon outage) by sending a QUIT command during a disallowed data-transfer attempt.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-20
References: http://code.google.com/p/pyftpdlib/issues/detail?id=71; http://code.google.com/p/pyftpdlib/source/browse/trunk/HISTORY; http://code.google.com/p/pyftpdlib/source/detail?r=344
CVE: CVE-2009-5010
Published: 2010-10-19
Description: Race condition in the FTPHandler class in ftpserver.py in pyftpdlib before 0.5.1 allows remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the accept function having an unexpected return value of None, a different vulnerability than CVE-2010-3494.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-362
References: http://bugs.python.org/issue6706; http://code.google.com/p/pyftpdlib/issues/detail?id=91; http://code.google.com/p/pyftpdlib/source/browse/trunk/HISTORY
CVE: CVE-2009-5011
Published: 2010-10-19
Description: Race condition in the FTPHandler class in ftpserver.py in pyftpdlib before 0.5.2 allows remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the getpeername function having an ENOTCONN error, a different vulnerability than CVE-2010-3494.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-362
References: http://code.google.com/p/pyftpdlib/issues/detail?id=100; http://code.google.com/p/pyftpdlib/source/browse/trunk/HISTORY; http://code.google.com/p/pyftpdlib/source/detail?r=543
CVE: CVE-2009-5012
Published: 2010-10-19
Description: ftpserver.py in pyftpdlib before 0.5.2 does not require the l permission for the MLST command, which allows remote authenticated users to bypass intended access restrictions and list the root directory via an FTP session.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-264
References: http://code.google.com/p/pyftpdlib/issues/detail?id=114; http://code.google.com/p/pyftpdlib/source/browse/trunk/HISTORY; http://code.google.com/p/pyftpdlib/source/detail?r=596
CVE: CVE-2009-5013
Published: 2010-10-19
Description: Memory leak in the on_dtp_close function in ftpserver.py in pyftpdlib before 0.5.2 allows remote authenticated users to cause a denial of service (memory consumption) by sending a QUIT command during a data transfer.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-399
References: http://code.google.com/p/pyftpdlib/issues/detail?id=119; http://code.google.com/p/pyftpdlib/source/browse/trunk/HISTORY; http://code.google.com/p/pyftpdlib/source/detail?r=615
CVE: CVE-2010-3157
Published: 2010-10-19
Description: Untrusted search path vulnerability in XacRett before 50 allows attackers to execute arbitrary code via a Trojan horse executable file, related to the explorer.exe filename and use of Windows Explorer.
CVSS Score: 9.3 (HIGH)
References: http://jvn.jp/jp/JVN04665167/index.html; http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000040.html; http://secunia.com/advisories/41850
CVE: CVE-2010-3158
Published: 2010-10-19
Description: Untrusted search path vulnerability in Lhaplus before 1.58 allows local users to gain privileges via a Trojan horse executable file in the current working directory.
CVSS Score: 6.9 (MEDIUM)
References: http://jvn.jp/jp/JVN18774708/index.html; http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000039.html; http://secunia.com/advisories/41742
CVE: CVE-2010-3492
Published: 2010-10-19
Description: The asyncore module in Python before 3.2 does not properly handle unsuccessful calls to the accept function, and does not have accompanying documentation describing how daemon applications should handle unsuccessful calls to the accept function, which makes it easier for remote attackers to conduct denial of service attacks that terminate these applications via network connections.
CVSS Score: 5.0 (MEDIUM)
References: http://bugs.python.org/issue6706; http://www.mandriva.com/security/advisories?name=MDVSA-2010:215; http://www.mandriva.com/security/advisories?name=MDVSA-2010:216
CVE: CVE-2010-3493
Published: 2010-10-19
Description: Multiple race conditions in smtpd.py in the smtpd module in Python 2.6, 2.7, 3.1, and 3.2 alpha allow remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the accept function having an unexpected return value of None, an unexpected value of None for the address, or an ECONNABORTED, EAGAIN, or EWOULDBLOCK error, or the getpeername function having an ENOTCONN error, a related issue to CVE-2010-3492.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-362
References: http://bugs.python.org/issue6706; http://bugs.python.org/issue9129; http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html
CVE: CVE-2010-3494
Published: 2010-10-19
Description: Race condition in the FTPHandler class in ftpserver.py in pyftpdlib before 0.5.2 allows remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the accept function having an unexpected value of None for the address, or an ECONNABORTED, EAGAIN, or EWOULDBLOCK error, a related issue to CVE-2010-3492.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-362
References: http://bugs.python.org/issue6706; http://code.google.com/p/pyftpdlib/issues/detail?id=104; http://code.google.com/p/pyftpdlib/issues/detail?id=105