CVE-2008-7263
UnknownEPSS 1.35%
Last modified
CVE-2008-7263 is a vulnerability of currently unknown severity. ftpserver.py in pyftpdlib before 0.5.0 does not delay its response after receiving an invalid login attempt, which makes it easier for remote attackers to obtain access via a brute-force attack.. EPSS estimates a 1.35% chance of exploitation in the next 30 days.
Description
ftpserver.py in pyftpdlib before 0.5.0 does not delay its response after receiving an invalid login attempt, which makes it easier for remote attackers to obtain access via a brute-force attack.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| G.Rodola | Pyftpdlib | <= 0.4.0 |
| G.Rodola | Pyftpdlib | 0.1 |
| G.Rodola | Pyftpdlib | 0.1.1 |
| G.Rodola | Pyftpdlib | 0.2.0 |
| G.Rodola | Pyftpdlib | 0.3.0 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2008-7263?
ftpserver.py in pyftpdlib before 0.5.0 does not delay its response after receiving an invalid login attempt, which makes it easier for remote attackers to obtain access via a brute-force attack.
How severe is CVE-2008-7263?
Severity scoring for CVE-2008-7263 is pending analysis. The EPSS model estimates a 1.35% probability of exploitation in the next 30 days.
How do I fix CVE-2008-7263?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2008
- CVE-2008-7257CRLF injection vulnerability in +webvpn+/index.html in WebVP…
- CVE-2008-7258The standardise function in Anibal Monsalve Salazar sSMTP 2.…
- CVE-2008-7259Rejected reason: This candidate is unused by its CNA.
- CVE-2008-7260Rejected reason: This candidate is unused by its CNA.
- CVE-2008-7261The Workplace (aka WP) component in IBM FileNet P8 Applicati…
- CVE-2008-7262Multiple directory traversal vulnerabilities in FTPServer.py…
- CVE-2008-7264The ftp_QUIT function in ftpserver.py in pyftpdlib before 0.…
- CVE-2008-7265The pr_data_xfer function in ProFTPD before 1.3.2rc3 allows …
- CVE-2008-7266Cross-site scripting (XSS) vulnerability in an unspecified S…
- CVE-2008-7267SQL injection vulnerability in announcements.php in SiteEngi…
- CVE-2008-7268The phpinfo function in SiteEngine 5.x allows remote attacke…
- CVE-2008-7269Open redirect vulnerability in api.php in SiteEngine 5.x all…
Are you affected by CVE-2008-7263?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST