Serv-U is prone to an authentication-bypass vulnerability. Attackers can exploit this issue to gain unauthorized access to the affected application. However, this requires that the application has password-based authentication disabled. Serv-U 10.2.0.2 and versions prior to 10.3.0.1 are vulnerable.

Updates are available. Please see the references for more information.

• http://www.serv-u.com/
• http://www.serv-u.com/releasenotes/
• https://www.securityfocus.com/bid/44905

---

Updated on 2015-03-25