Miggo Logo
Miggo Vulnerability Database
→
CVE-2007-6737

CVE-2007-6737: Improper Authentication in pyftpdlib

7.3

CVSS Score
3.1

Basic Information

CVE ID
CVE-2007-6737
GHSA ID
GHSA-9x66-ghqx-8g5r
EPSS Score
0.66614%
CWE
CWE-287
Published
5/1/2022
Updated
10/21/2024
KEV Status
No
Technology
TechnologyPython

Technical Details

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Package NameEcosystemVulnerable VersionsFirst Patched Version
pyftpdlibpip< 0.2.00.2.0

Vulnerability Intelligence
Miggo AIMiggo AI

Miggo AIRoot Cause Analysis

The vulnerability stems from improper tracking of authentication attempts for invalid usernames. The USER command handler (ftp_USER) is responsible for validating usernames. In vulnerable versions, failed username checks didn't increment the 'attempted_logins' counter, weakening brute-force protections. This matches the CWE-287 description and the advisory's focus on USER command handling. The function name is inferred from standard FTP command handling patterns in pyftpdlib and the vulnerability's context.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

WAF Protection Rules

WAF Rule

*TPS*rv*r.py in py*tp*li* ***or* *.*.* *o*s not in*r*m*nt t** *tt*mpt**_lo*ins *ount *or * US*R *omm*n* t**t sp**i*i*s *n inv*li* us*rn*m*, w*i** m*k*s it **si*r *or r*mot* *tt**k*rs to o*t*in ****ss vi* * *rut*-*or** *tt**k.

Reasoning

T** vuln*r**ility st*ms *rom improp*r tr**kin* o* *ut**nti**tion *tt*mpts *or inv*li* us*rn*m*s. T** US*R *omm*n* **n*l*r (*tp_US*R) is r*sponsi*l* *or v*li**tin* us*rn*m*s. In vuln*r**l* v*rsions, **il** us*rn*m* ****ks *i*n't in*r*m*nt t** '*tt*mpt