Rhinosoft Serv-U FTP Multiple Vulnerabilities

  1. Network Vulnerabilities
  2. Denial of Service
  3. Rhinosoft Serv-U FTP Multiple Vulnerabilities
Summary
This host is running Serv-U FTP Server and is prone to multiple vulnerabilities.
Impact
Successful exploitation will let the attacker conduct directory traversal attack or can cause denial of service. Impact Level: System/Application
Solution
Upgrade to Rhinosoft Serv-U FTP Server version 10 or later, For updates refer to http://www.serv-u.com
Insight
- Error when processing 'MKD' commands which can be exploited to create directories residing outside a given user's home directory via directory traversal attacks. - Error when handing certain FTP commands, by sending a large number of 'SMNT' commands without an argument causes the application to stop responding.
Affected
Rhinosoft Serv-U FTP Server version 7.4.0.1 or prior.
References
Updated on 2017-03-28
Severity
High Severity
Classification
Related Vulnerabilities