CVE-2009-5010: Race condition in the FTPHandler class in ftpserver.py in pyftpdlib before 0.5.1 allows remote attackers to...

Security readout for executives and security teams

CVE-2009-5010 is a remote denial-of-service flaw in pyftpdlib before 0.5.1. A timing bug can cause the FTP daemon to stop handling service when a TCP connection closes at the wrong moment. The documented impact is outage, not data theft or code execution. Exposure is likely limited to systems embedding or running pyftpdlib before 0.5.1, especially internet-facing FTP services. The CVE bundle does not provide populated vendor, product, CPE, or distribution package mappings. Prioritize remediation for public or business-critical FTP services. Internal, legacy, or low-use services are lower urgency but should still be upgraded because the failure mode is remote service outage. Mitigation focus: Inventory FTP services and dependencies for pyftpdlib usage.; Upgrade pyftpdlib to 0.5.1 or later where applicable.; Restrict FTP exposure to trusted networks where possible..

Prepared

Jun 28, 2026, 01:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.