solarwinds serv-u file server 8.2.0.0 vulnerabilities and exploits

(subscribe to this query)

Rhino Software Serv-U 7.0.0.1 up to and including 8.2.0.3 allows remote malicious users to cause a denial of service (server crash) via unspecified vectors related to the "SITE SET TRANSFERPROGRESS ON" FTP command.

Stack-based buffer overflow in the TEA decoding algorithm in RhinoSoft Serv-U FTP server 7.0.0.1, 9.0.0.5, and other versions prior to 9.1.0.0 allows remote malicious users to execute arbitrary code via a long hexadecimal string.

1 EDB exploit

Directory traversal vulnerability in Serv-U prior to 9.2.0.1 allows remote authenticated users to read arbitrary files via unspecified vectors.

Directory traversal vulnerability in Serv-U FTP Server prior to 11.1.0.5 allows remote authenticated users to read and write arbitrary files, and list and create arbitrary directories, via a "..:/" (dot dot colon forward slash) in the (1) list, (2) put, or (3) get comma...

1 EDB exploit

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook