CVE-2009-5013: Memory leak in the on_dtp_close function in ftpserver.py in pyftpdlib before 0.5.2 allows remote authentica...

Security readout for executives and security teams

CVE-2009-5013 is a denial-of-service issue in pyftpdlib before 0.5.2. An authenticated FTP user could trigger memory growth during a data-transfer close condition, potentially exhausting memory and disrupting the FTP service or host. Exposure is most likely where an application or service embeds pyftpdlib before 0.5.2 and permits authenticated FTP access. Risk is lower for systems without pyftpdlib, without FTP exposure, or with tightly controlled trusted accounts. Treat as a targeted availability risk for legacy FTP services using old pyftpdlib. Prioritize if the service is internet-reachable, business-critical, or grants FTP accounts to external users. Mitigation focus: Inventory services and applications that use pyftpdlib.; Upgrade pyftpdlib to 0.5.2 or later where applicable.; Restrict FTP access to trusted authenticated users while remediation is pending..

Prepared

Jun 28, 2026, 01:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.