CVE-2011-4800

Directory traversal vulnerability in Serv-U FTP Server before 11.1.0.5 allows remote authenticated users to read and write arbitrary files, and list and create arbitrary directories, via a "..:/" dot dot colon forward slash in the 1 list, 2 put, or 3 get commands...

CVE-2011-4800

CVE-2011-4800 affects Serv-U FTP Server up to 11.1.0.4. It is a directory-traversal flaw where a back-to-front path use ("..:/") in LIST, PUT, or GET commands enables remote authenticated users to read/write arbitrary files and list/create directories. Public exploits have been noted; CVSS ~9.0 (...

KLA10322 RLF & WLF vulnerabilities in Serv-U

A directory traversal was found in Serv-U FTP Server. By exploiting this vulnerability malicious users can read and write arbitrary files. This vulnerability can be exploited remotely via a specially designed path. Original advisories - Exploitation Public exploits exist for this vulnerability...