CVE-2007-6736: G.rodola Pyftpdlib

Medium severity, CVSS 6.5. EPSS: 1.9% chance of exploitation in the next 30 days.

Multiple directory traversal vulnerabilities in FTPServer.py in pyftpdlib before 0.2.0 allow remote authenticated users to access arbitrary files and directories via a .. (dot dot) in a (1) LIST, (2) STOR, or (3) RETR command.

Affected products

• G.rodola Pyftpdlib: up to and including 0.1.1; version 0.1 only

Published 2010-10-19. Last modified 2026-06-16.