CVE

Id
46078  
CVE No.
CVE-2010-3494  
Status
Candidate  
Description
Race condition in the FTPHandler class in ftpserver.py in pyftpdlib before 0.5.2 allows remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the accept function having an unexpected value of None for the address, or an ECONNABORTED, EAGAIN, or EWOULDBLOCK error, a related issue to CVE-2010-3492.  
Phase
Assigned (20100924)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
501177 46078 CVE-2010-3494 MLIST:[oss-security] 20100909 CVE Request -- Python -- accept() implementation in async core is broken => more subcases  View
501178 46078 CVE-2010-3494 URL:http://www.openwall.com/lists/oss-security/2010/09/09/6  View
501179 46078 CVE-2010-3494 MLIST:[oss-security] 20100910 Re: CVE Request -- Python -- accept() implementation in async core is broken => more subcases  View
501180 46078 CVE-2010-3494 URL:http://www.openwall.com/lists/oss-security/2010/09/11/2  View
501181 46078 CVE-2010-3494 MLIST:[oss-security] 20100922 Re: CVE Request -- Python -- accept() implementation in async core is broken => more subcases  View
501182 46078 CVE-2010-3494 URL:http://www.openwall.com/lists/oss-security/2010/09/22/3  View
501183 46078 CVE-2010-3494 MLIST:[oss-security] 20100924 Re: CVE Request -- Python -- accept() implementation in async core is broken => more subcases  View
501184 46078 CVE-2010-3494 URL:http://www.openwall.com/lists/oss-security/2010/09/24/3  View
501185 46078 CVE-2010-3494 MISC:http://bugs.python.org/issue6706  View
501186 46078 CVE-2010-3494 MISC:https://bugs.launchpad.net/zodb/+bug/135108  View
501187 46078 CVE-2010-3494 CONFIRM:http://code.google.com/p/pyftpdlib/issues/detail?id=104  View
501188 46078 CVE-2010-3494 CONFIRM:http://code.google.com/p/pyftpdlib/issues/detail?id=105  View
501189 46078 CVE-2010-3494 CONFIRM:http://code.google.com/p/pyftpdlib/source/browse/trunk/HISTORY  View
501190 46078 CVE-2010-3494 CONFIRM:http://code.google.com/p/pyftpdlib/source/detail?r=556  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
28103 JVNDB-2012-003810 AVG Anti-Virus における任意のコードを実行される脆弱性 AVG Anti-Virus は、hcp:// URL を処理する Microsoft ヘルプとサポート センター (Microsoft Help and Support Center) とのやり取りを適切に行わないため、検知アプローチによるコード実行停止処理に遅れが発生することにより、任意のコードを実行される脆弱性が存在します。 CVE-2010-3498 46078 6.4 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003810.html  View