RhinoSoft Serv-U FTP Server is prone to a remote stack-based buffer- overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Attackers can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition. Serv-U 9.0.0.5 is vulnerable other versions may also be affected.

Updates are available. Please see the references for details.

• http://www.securityfocus.com/archive/1/507955
• http://www.securityfocus.com/bid/37051
• http://www.serv-u.com/

---

Updated on 2015-03-25