Serv-U Web Client is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user- supplied data. Attackers can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition. Serv-U Web Client 9.0.0.5 is vulnerable other versions may also be affected.

• http://www.rangos.de/ServU-ADV.txt
• http://www.securityfocus.com/bid/36895
• http://www.serv-u.com/Browser-Transfer-Client.asp

---

Updated on 2015-03-25