CVE catalog

CVE-2009-5010

python-pyftpdlib: CVE-2009-5010

[CVE catalog]

Severity
Low
Source
[NVD] · [CVE record]
EPSS
1.36% · Oct 25, 2026

Race condition in the FTPHandler class in ftpserver.py in pyftpdlib before 0.5.1 allows remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the accept function having an unexpected return value of None, a different vulnerability than CVE-2010-3494.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianpython-pyftpdlibsid2.2.0-1not affected
Debianpython-pyftpdlibforky2.2.0-1not affected
Debianpython-pyftpdlibtrixie2.0.1-1not affected
Debianpython-pyftpdlibbookworm1.5.7-3not affected

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianpython-pyftpdlibsourcesidNot affectedunimportantNot reportedNot reported
Debianpython-pyftpdlibsourceforkyNot affectedunimportantNot reportedNot reported
Debianpython-pyftpdlibsourcetrixieNot affectedunimportantNot reportedNot reported
Debianpython-pyftpdlibsourcebookwormNot affectedunimportantNot reportedNot reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [python3-pyftpdlib]Not affected

    Source package: [python-pyftpdlib]

    Details (2)
    • 1.5.7-3 · all · bookworm

      Not affected

      dsa · python-pyftpdlib · debian · bookworm

    • 1.5.7-3 · all · bookworm

      Not affected

      dsa · python-pyftpdlib · debian · bookworm

  • [python-pyftpdlib-doc]Not affected

    Source package: [python-pyftpdlib]

    Details (2)
    • 1.5.7-3 · all · bookworm

      Not affected

      dsa · python-pyftpdlib · debian · bookworm

    • 1.5.7-3 · all · bookworm

      Not affected

      dsa · python-pyftpdlib · debian · bookworm

Observed:

References