Serv-U FTP Server < 15.0.1.20 DoS

According to its banner, the installed version of Serv-U is a version prior to version 15.0.1.20. It is, therefore, affected by an unspecified denial of service vulnerability. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if descriptio...

PT-2013-67

Name of the Vulnerable Software and Affected Versions Serv-U File Server affected versions not specified Description The issue is related to errors that occur when handling application variable values. This allows a remote attacker to discover the system configuration, including user authenticati...

PT-2013-69

Name of the Vulnerable Software and Affected Versions Serv-U File Server affected versions not specified Description The issue is related to an error that occurs when processing an HTTP request with a recursively declared variable. This can be exploited by a remote attacker to cause a denial of...

PT-2013-66

Name of the Vulnerable Software and Affected Versions Serv-U File Server affected versions not specified Description The issue is related to errors in the code of the web interface forms, allowing a remote attacker to modify the system configuration. Recommendations At the moment, there is no...

PT-2013-68

Name of the Vulnerable Software and Affected Versions Serv-U File Server affected versions not specified Description The issue is related to a lack of proper handling of file system access using advanced NTFS syntax. This can be exploited when a URL requested by a user is mapped to locations...

PT-2013-70

Name of the Vulnerable Software and Affected Versions Serv-U File Server affected versions not specified Description The issue is related to insufficient validation of client-supplied parameters used in HTM scripts, allowing a remote attacker to execute arbitrary JavaScript code in the user's...

Serv-U SSL远程拒绝服务及LDAP漏洞

Serv-U是一种使用广泛的FTP服务器程序。 Serv-U 15.0.0.0之前版本在SSL和LDAP的实现上存在安全漏洞，可导致拒绝服务等其他影响。成功利用此漏洞需要设置 "Require Fully Qualified Membership" LDAP登录设置。 0 serv-u 14.x 厂商补丁： serv-u ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.serv-u.com/releasenotes/...

Serv-U < 14.0.2.0 FTP Server SSL Renegotiation DoS

According to its banner, the installed version of Serv-U is earlier than 14.0.2.0 and is, therefore, potentially affected by a denial of service vulnerability. A remote attacker could cause denial of service conditions by continually sending SSL renegotiation requests to the application...

Serv-U FTP <= 11.1.0.3 possible management console access

Exploit for windows platform in category dos / poc -------- winerr.h -------- / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include include void stderrvoid char error; switchWSAGetLastError case 10004: error =...

CVE-2011-4800

Directory traversal vulnerability in Serv-U FTP Server before 11.1.0.5 allows remote authenticated users to read and write arbitrary files, and list and create arbitrary directories, via a "..:/" dot dot colon forward slash in the 1 list, 2 put, or 3 get commands...

Directory traversal

Directory traversal vulnerability in Serv-U FTP Server before 11.1.0.5 allows remote authenticated users to read and write arbitrary files, and list and create arbitrary directories, via a "..:/" dot dot colon forward slash in the 1 list, 2 put, or 3 get commands...

CVE-2011-4800

CVE-2011-4800 affects Serv-U FTP Server up to 11.1.0.4. It is a directory-traversal flaw where a back-to-front path use ("..:/") in LIST, PUT, or GET commands enables remote authenticated users to read/write arbitrary files and list/create directories. Public exploits have been noted; CVSS ~9.0 (...

CVE-2011-4800: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Serv-U FTP Server before 11.1.0.5 allows remote authenticated users to read and write arbitrary files, and list and create arbitrary directories, via a "..:/" dot dot colon forward slash in the 1 list, 2 put, or 3 get commands...

PT-2011-5106

Name of the Vulnerable Software and Affected Versions Serv-U FTP Server versions prior to 11.1.0.5 Description A directory traversal issue allows remote authenticated users to read and write arbitrary files, and list and create arbitrary directories, by using a "..:/" dot dot colon forward slash ...

CVE-2011-4800

Directory traversal vulnerability in Serv-U FTP Server before 11.1.0.5 allows remote authenticated users to read and write arbitrary files, and list and create arbitrary directories, via a "..:/" dot dot colon forward slash in the 1 list, 2 put, or 3 get commands...

KLA10322 RLF & WLF vulnerabilities in Serv-U

A directory traversal was found in Serv-U FTP Server. By exploiting this vulnerability malicious users can read and write arbitrary files. This vulnerability can be exploited remotely via a specially designed path. Original advisories - Exploitation Public exploits exist for this vulnerability...

FTPS Cleartext Fallback Security Bypass

The remote FTPS server running on the remote host is affected by a security bypass vulnerability due to accepting unencrypted commands if SSL negotiations fail. A man-in-the-middle attacker can exploit this to intercept credentials and modify files. C Tenable Network Security, Inc...

Serv-U FTP server security vulnerabilities

Resource exhaustion, administrative session hijacking...

Vulnerabilities in Serv-U 11.1.0.3

Luigi Auriemma Application: Serv-U FTP http://www.serv-u.com Versions: = 11.1.0.3 Platforms: Windows, Linux bug B should affect only some Windows versions Bugs: A sockets and ports consumption B possible access to the management console Exploitation: remote Date: 03 Dec 2011 Author: Luigi Auriemm...

Serv-U数据连接处理拒绝服务和会话令牌漏洞

BUGTRAQ ID: 50906 Serv-U是一种使用广泛的FTP服务器程序。 Serv-U在实现上存在安全漏洞，可被恶意用户利用造成拒绝服务并绕过某些安全限制。 1）在操作数据连接的监听套接字处理中存在错误，通过大量的FTP PASV命令，可耗尽可用的TCP端口，造成无法处理其他被动连接。 2）管理控制台会在管理员登录后生成较弱的会话令牌，这会允许枚举有效的令牌并通过FTP反弹攻击造成任意用户。成功利用此漏洞需要用户具有读写权限并让管理员打开控制台。 Serv-U 11.1.0.3 厂商补丁： RhinoSoft ---------...