CVE-2010-2072
Pyftpd 0.8.4 creates log files with predictable names in a temporary directory, which allows...
Pyftpd 0.8.4 creates log files with predictable names in a temporary directory, which allows local users to cause a denial of service and obtain sensitive information.
Exploit likelihood
What each source reports
NVD Score used
Pyftpd 0.8.4 creates log files with predictable names in a temporary directory, which allows local users to cause a denial of service and obtain sensitive information.
- Record
CVE-2010-2072- CVSS 2.0
- 3.6 Low
AV:L/AC:L/Au:N/C:P/I:N/A:P - Weakness
- CWE-310
- Updated
- 2026-11-02
CVE List No score
Pyftpd 0.8.4 creates log files with predictable names in a temporary directory, which allows local users to cause a denial of service and obtain sensitive information.
- Record
CVE-2010-2072- Updated
- 2026-11-02
EUVDEUVD-2010-2091 No score
Pyftpd 0.8.4 creates log files with predictable names in a temporary directory, which allows local users to cause a denial of service and obtain sensitive information.
- Record
EUVD-2010-2091- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gj9w-hmvj-m22x No score
Pyftpd 0.8.4 creates log files with predictable names in a temporary directory, which allows...
Pyftpd 0.8.4 creates log files with predictable names in a temporary directory, which allows local users to cause a denial of service and obtain sensitive information.
- Record
GHSA-gj9w-hmvj-m22x- Updated
- 2026-11-02
OSV No score
Pyftpd 0.8.4 creates log files with predictable names in a temporary directory, which allows local users to cause a denial of service and obtain sensitive information.
- Record
CVE-2010-2072- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-2072 is a low vulnerability (CVSS 3.6) in Radovan Garabik Pyftpd, published June 16, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.30%, the 23rd percentile. No source names a fixed version.