Solarwinds

Serv-u File Server

20 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.1

CVE-2021-25179

  • EPSS 1.84%
  • Veröffentlicht 05.05.2021 03:15:07
  • Zuletzt bearbeitet 21.11.2024 05:54:30

SolarWinds Serv-U before 15.2 is affected by Cross Site Scripting (XSS) via the HTTP Host header.

9

CVE-2011-4800

Exploit
  • EPSS 1.61%
  • Veröffentlicht 14.12.2011 00:55:02
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Directory traversal vulnerability in Serv-U FTP Server before 11.1.0.5 allows remote authenticated users to read and write arbitrary files, and list and create arbitrary directories, via a "..:/" (dot dot colon forward slash) in the (1) list, (2) put...

4

CVE-2009-4815

  • EPSS 0.43%
  • Veröffentlicht 27.04.2010 15:30:00
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Directory traversal vulnerability in Serv-U before 9.2.0.1 allows remote authenticated users to read arbitrary files via unspecified vectors.

10

CVE-2009-4006

  • EPSS 77.87%
  • Veröffentlicht 20.11.2009 11:30:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Stack-based buffer overflow in the TEA decoding algorithm in RhinoSoft Serv-U FTP server 7.0.0.1, 9.0.0.5, and other versions before 9.1.0.0 allows remote attackers to execute arbitrary code via a long hexadecimal string.

5

CVE-2009-3655

  • EPSS 4.12%
  • Veröffentlicht 09.10.2009 14:30:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Rhino Software Serv-U 7.0.0.1 through 8.2.0.3 allows remote attackers to cause a denial of service (server crash) via unspecified vectors related to the "SITE SET TRANSFERPROGRESS ON" FTP command.

7.8

CVE-2009-1031

  • EPSS 15.74%
  • Veröffentlicht 20.03.2009 00:30:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Directory traversal vulnerability in the FTP server in Rhino Software Serv-U File Server 7.0.0.1 through 7.4.0.1 allows remote attackers to create arbitrary directories via a \.. (backslash dot dot) in an MKD request.

4

CVE-2009-0967

  • EPSS 4.43%
  • Veröffentlicht 19.03.2009 10:30:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

The FTP server in Serv-U 7.0.0.1 through 7.4.0.1 allows remote authenticated users to cause a denial of service (service hang) via a large number of SMNT commands without an argument.

9

CVE-2008-4501

  • EPSS 4.6%
  • Veröffentlicht 09.10.2008 00:00:01
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Directory traversal vulnerability in the FTP server in Serv-U 7.0.0.1 through 7.3, including 7.2.0.1, allows remote authenticated users to overwrite or create arbitrary files via a ..\ (dot dot backslash) in the RNTO command.

4

CVE-2008-4500

Exploit
  • EPSS 10.06%
  • Veröffentlicht 09.10.2008 00:00:01
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Serv-U 7.0.0.1 through 7.3, including 7.2.0.1, allows remote authenticated users to cause a denial of service (CPU consumption) via a crafted stou command, probably related to MS-DOS device names, as demonstrated using "con:1".

4

CVE-2008-3731

  • EPSS 4.02%
  • Veröffentlicht 20.08.2008 16:41:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Unspecified vulnerability in Serv-U File Server 7.0.0.1, and other versions before 7.2.0.1, allows remote authenticated users to cause a denial of service (daemon crash) via an SSH session with SFTP commands for directory creation and logging.