Published: 09/10/2008 Updated: 28/07/2020

CVSS v2 Base Score: 9 | Impact Score: 10 | Exploitability Score: 8

VMScore: 905

Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C

Directory traversal vulnerability in the FTP server in Serv-U 7.0.0.1 up to and including 7.3, including 7.2.0.1, allows remote authenticated users to overwrite or create arbitrary files via a ..\ (dot dot backslash) in the RNTO command.

Vulnerable Product	Search on Vulmon	Subscribe to Product
solarwinds serv-u file server 7.1.0.1
solarwinds serv-u file server 7.1.0.2
solarwinds serv-u file server 7.0.0.2
solarwinds serv-u file server 7.0.0.3
solarwinds serv-u file server 7.3.0.0
solarwinds serv-u file server 7.3.0.1
solarwinds serv-u file server 7.3.0.2
solarwinds serv-u file server 7.0.0.4
solarwinds serv-u file server 7.1.0.0
solarwinds serv-u file server 7.0.0.1
solarwinds serv-u file server 7.2.0.0
solarwinds serv-u file server 7.2.0.1

#Serv-U <= 7201 / 73 ftp file replacement #user must have upload permissions # #(x) dmnt 2008-10-01 220 Serv-U FTP Server v73 ready user test 331 User name okay, need password pass test 230 User logged in, proceed rnfr any_exist_fileext 350 File or directory exists, ready for destination name rnto \\\bootini 250 RNTO command s ...

CWE-22 http://secunia.com/advisories/32150 http://securityreason.com/securityalert/4378 http://www.vupen.com/english/advisories/2008/2746 https://www.exploit-db.com/exploits/6661 https://nvd.nist.gov https://www.exploit-db.com/exploits/6661/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2008-4501

Vulnerability Summary

Vulnerability Trend

Exploits

References

Vulmon Search

About

Products

Connect