CVE-2009-5012

MEDIUM · CVSS 4 EPSS 1.03%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2010-10-19 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2009-5012

Severity

MEDIUM

CVSS

EPSS

1.03%

Original NVD Description

ftpserver.py in pyftpdlib before 0.5.2 does not require the l permission for the MLST command, which allows remote authenticated users to bypass intended access restrictions and list the root directory via an FTP session.