CVE-2007-6739: pyftpdlib FTPServer.py Denial of Service
Summary
CVE-2007-6739: FTPServer.py in pyftpdlib before 0.2.0 allows remote attackers to cause a denial of service via a long command. Affects pyftpdlib versions < 0.2.0. Fixed in 0.2.0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
pyftpdlib is a Python FTP server library that provides a high-level interface for implementing FTP servers. It allows developers to create custom FTP servers with ease. The library is available on PyPI and is widely used in Python projects.
Vulnerability Detail
The vulnerability (CVE-2007-6739) exists in the FTPServer.py file of pyftpdlib before version 0.2.0. It allows remote attackers to cause a denial of service by sending a long command to the FTP server. This vulnerability can be exploited to exhaust server resources, leading to service disruption or unavailability.
How To Fix
Latest published version: 2.2.0 as of 23 Oct 2026
pip install --upgrade "pyftpdlib==2.2.0"Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
0.2.0
This is the first release that contains the fix.
pip install --upgrade "pyftpdlib==0.2.0"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is crucial to update pyftpdlib to the fixed version as soon as possible to mitigate the risk of a denial of service attack.
Conclusion
The vulnerability (CVE-2007-6739) in pyftpdlib allows remote attackers to cause a denial of service by sending a long command to the FTP server. To mitigate this risk, it is crucial to upgrade pyftpdlib to version 0.2.0 or later. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for pyftpdlib →
FAQ
pyftpdlib is a Python FTP server library that allows developers to create custom FTP servers.
The vulnerability allows remote attackers to cause a denial of service, potentially leading to service disruption or unavailability.
To fix this vulnerability, upgrade pyftpdlib to version 0.2.0 or later.
There is no known workaround. It is recommended to update pyftpdlib to the fixed version.
For more information, you can visit the vulnerability source at https://github.com/pypa/advisory-database/blob/main/vulns/pyftpdlib/PYSEC-2010-23.yaml
Related vulnerabilities
Recent vulnerabilities recorded for pyftpdlib.
