CVE-2008-7262: G.rodola Pyftpdlib

Medium severity, CVSS 6.5. EPSS: 2% chance of exploitation in the next 30 days.

Multiple directory traversal vulnerabilities in FTPServer.py in pyftpdlib before 0.3.0 allow remote authenticated users to access arbitrary files and directories via vectors involving a symlink in a pathname to a (1) CWD, (2) DELE, (3) STOR, or (4) RETR command.

Affected products

• G.rodola Pyftpdlib: up to and including 0.2.0; version 0.1 only; version 0.1.1 only

Published 2010-10-19. Last modified 2026-06-16.