Serv-U FTP Server - prepareinstallation Privilege Escalation (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Serv-U FTP Server prepareinstallation Privilege Escalation', 'Description' = %q This module attempts to gain root privileges on systems running...

Serv-U FTP Server 15.1.7 prepareinstallation Privilege Escalation Exploit

This Metasploit module attempts to gain root privileges on systems running Serv-U FTP Server versions prior to 15.1.7. The Serv-U executable is setuid root, and uses ARGV0 in a call to system, without validation, when invoked with the -prepareinstallation flag, resulting in command execution with...

Serv-U FTP Server prepareinstallation Privilege Escalation

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Serv-U FTP Server prepareinstallation Privilege Escalation', 'Description' = %q This module attempts to gain root privileges on systems running...

Hardcoded credentials

In the ABB IDAL FTP server, an authenticated attacker can traverse to arbitrary directories on the hard disk with "CWD ../" and then use the FTP server functionality to download and upload files. An unauthenticated attacker can take advantage of the hardcoded or default credential pair exor/exor ...

CVE-2019-7227

The CVE-2019-7227 issue affects ABB IDAL FTP server (PB610 Panel Builder 600 family). The vulnerability is a path traversal in the IDAL FTP server: an authenticated attacker can use CWD ../ to traverse directories and download/upload files; an unauthenticated attacker can exploit hardcoded/defaul...

CVE-2019-7231

The ABB IDAL FTP server (PB610 Panel Builder 600) is affected by a buffer overflow when an authenticated attacker sends an FTP command string of 472 bytes or more; the overflow is handled but terminates the server. Remediation is to update PB610 to v2.8.0.424 (and related BSP UN31 v2.31, UN30 v2....

Format string

The ABB IDAL FTP server mishandles format strings in a username during the authentication process. Attempting to authenticate with the username %s%p%x%d will crash the server. Sending %08x.AAAA.%08x.%08x will log memory content from the stack...

CVE-2019-7230

The CVE-2019-7230 issue affects ABB IDAL FTP server (PB610 Panel Builder 600) where the IDAL FTP/server mishandles format strings in the username during authentication. The root cause is insecure, format-string handling in the username, enabling memory corruption that can crash the server or log ...

ABB IDAL FTP Server Path Traversal

XL-19-008 - ABB IDAL FTP Server Path Traversal Vulnerability ======================================================================== Identifiers ----------- XL-19-008 CVE-2019-7227 ABBVU-IAMF-1902006 CVSS Score ---------- 7.3 AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N Affected vendor --------------- AB...

ABB IDAL FTP Server Uncontrolled Format String

XL-19-004 - ABB IDAL FTP Server Uncontrolled Format String Vulnerability ======================================================================== Identifiers ----------- XL-19-004 CVE-2019-7230 ABBVU-IAMF-1902008 CVSS Score ---------- 8.8 AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected vendor...

ABB IDAL FTP Server Buffer Overflow

XL-19-007 - ABB IDAL FTP Server Buffer Overflow Vulnerability ======================================================================== Identifiers ----------- XL-19-007 CVE-2019-7231 ABBVU-IAMF-1902010 CVSS Score ---------- 6.5 AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected vendor --------------- A...

Serv-U FTP Server < 15.1.7 - Local Privilege Escalation Exploit

Exploit for linux platform in category local exploits / CVE-2019-12181 Serv-U 15.1.6 Privilege Escalation vulnerability found by: Guy Levin @vastart - twitter.com/vastart https://blog.vastart.dev to compile and run: gcc servu-pe-cve-2019-12181.c -o pe && ./pe / include include include int main ch...

Serv-U FTP Server < 15.1.7 - Local Privilege Escalation (1)

/ CVE-2019-12181 Serv-U 15.1.6 Privilege Escalation vulnerability found by: Guy Levin @vastart - twitter.com/vastart https://blog.vastart.dev to compile and run: gcc servu-pe-cve-2019-12181.c -o pe && ./pe / include include include int main char vulnargs = "" ; id; echo 'opening root shell' ;...

Serv-U FTP Server 15.1.6 Privilege Escalation

/ CVE-2019-12181 Serv-U 15.1.6 Privilege Escalation vulnerability found by: Guy Levin @vastart - twitter.com/vastart https://blog.vastart.dev to compile and run: gcc servu-pe-cve-2019-12181.c -o pe && ./pe / include include include int main char vulnargs = "" ; id; echo 'opening root shell' ;...

Serv-U FTP Server 15.1.7 - Local Privilege Escalation (1)

Serv-U FTP Server 15.1.7 - Local Privilege Escalation 1 / CVE-2019-12181 Serv-U 15.1.6 Privilege Escalation vulnerability found by: Guy Levin @vastart - twitter.com/vastart https://blog.vastart.dev to compile and run: gcc servu-pe-cve-2019-12181.c -o pe && ./pe / include include include int main...

Serv-U FTP Server prepareinstallation Privilege Escalation

A privilege escalation vulnerability exists in SolarWinds Serv-U before 15.1.7 for Linux. Recent assessments: pbarry-r7 at November 21, 2019 6:58pm UTC reported: Sounds like this vuln appears in a LOT of versions of the software. Probably should update to v15.1.7+. Assessed Attacker Value: 5...

ipswitch WS_FTP Server Directory Traversal Vulnerability (CNVD-2019-24247)

ipswitch WSFTP Server is an FTP service program for Windows systems. A directory traversal vulnerability exists in SSHServerAPI.dll in ipswitch WSFTP Server versions prior to 2018 8.6.1. The vulnerability can be exploited by an attacker to obtain pathnames on the host operating system via the SCP...

ipswitch WS_FTP Server Directory Traversal Vulnerability

ipswitch WSFTP Server is an FTP service program for Windows systems. A directory traversal vulnerability exists in SSHServerAPI.dll in ipswitch WSFTP Server versions prior to 2018 8.6.1. An attacker can use this vulnerability to write files and create directories outside of their authorized...

CVE-2019-12146

A Directory Traversal issue was discovered in SSHServerAPI.dll in Progress ipswitch WSFTP Server 2018 before 8.6.1. Attackers have the ability to abuse a flaw in the SCP listener by crafting strings using specific patterns to write files and create directories outside of their authorized director...

CVE-2019-12144

An issue was discovered in SSHServerAPI.dll in Progress ipswitch WSFTP Server 2018 before 8.6.1. Attackers have the ability to abuse a path traversal vulnerability using the SCP protocol. Attackers who leverage this flaw could also obtain remote code execution by crafting a payload that abuses th...