SolarWinds Serv-U FTP Server 15.1.6 allows remote authenticated users to execute arbitrary code by leveraging the Import feature and modifying a CSV file.
SolarWinds Serv-U FTP Server version 1516 is vulnerable to privilege escalation from remote authenticated users by leveraging the CSV user import function This leads to obtaining remote code execution under the context of the Windows SYSTEM account in a default installation ...
<!--X-Body-Begin-->
<!--X-User-Header-->
Full Disclosure
mailing list archives
<!--X-User-Header-End-->
<!--X-TopPNI-->
By Date
By Thread
</form>
<!--X-TopPNI-End-->
<!--X-MsgBody-->
<!--X-Subject-Header-Begin-->
Privilege Escalation + Remote Code Execution in SolarWinds Serv-U FTP Server
<!--X-Subject-Header-End-->
<!--X-Head-of ...
Vulmon