EUVD-2019-4704

Malware in sbrugna...

EUVD-2000-1020

Malware in sbrugna...

EUVD-2000-0128

Malware in sbrugna...

EUVD-2004-2524

Malware in sbrugna...

EUVD-2009-0964

Malware in sbrugna...

EUVD-2005-3466

Malware in sbrugna...

EUVD-2019-4705

Malware in sbrugna...

CVE-2019-19829

A cross-site scripting XSS vulnerability exists in SolarWinds Serv-U FTP Server 15.1.7 in the email parameter, a different vulnerability than CVE-2018-19934 and CVE-2019-13182...

CVE-2019-13182

A stored cross-site scripting XSS vulnerability exists in the web UI of SolarWinds Serv-U FTP Server 15.1.7...

CVE-2011-4800

Directory traversal vulnerability in Serv-U FTP Server before 11.1.0.5 allows remote authenticated users to read and write arbitrary files, and list and create arbitrary directories, via a "..:/" dot dot colon forward slash in the 1 list, 2 put, or 3 get commands...

CVE-2002-2393

Serv-U FTP server 3.0, 3.1 and 4.0.0.4 does not accept new connections while validating user folder access rights, which allows remote attackers to cause a denial of service no new connections via a series of MKD commands...

CVE-2021-35252

Common encryption key appears to be used across all deployed instances of Serv-U FTP Server. Because of this an encrypted value that is exposed to an attacker can be simply recovered to plaintext...

CVE-2021-35252

Common encryption key appears to be used across all deployed instances of Serv-U FTP Server. Because of this an encrypted value that is exposed to an attacker can be simply recovered to plaintext...

Code injection

Common encryption key appears to be used across all deployed instances of Serv-U FTP Server. Because of this an encrypted value that is exposed to an attacker can be simply recovered to plaintext...

CVE-2021-35252

The CVE-2021-35252 case covers SolarWinds Serv-U FTP Server where a common encryption key is used across all deployed instances, enabling plaintext recovery of an encrypted value exposed to an attacker. Public documents indicate affected software versions include Serv-U prior to 15.3.0 (per Nessu...

CVE-2021-35252 Common Key Vulnerability in Serv-U FTP Server

Common encryption key appears to be used across all deployed instances of Serv-U FTP Server. Because of this an encrypted value that is exposed to an attacker can be simply recovered to plaintext...

CVE-2021-35252 Common Key Vulnerability in Serv-U FTP Server

Common encryption key appears to be used across all deployed instances of Serv-U FTP Server. Because of this an encrypted value that is exposed to an attacker can be simply recovered to plaintext...

PT-2022-10455 · Rhinosoft · Serv-U Ftp Server

Name of the Vulnerable Software and Affected Versions: Serv-U FTP Server affected versions not specified Description: A common encryption key is used across all deployed instances of the software. This allows an attacker to recover an encrypted value to plaintext if it is exposed. Recommendations...

Serv-U FTP Server <= 15.2.3 Hotfix 1 Memory Escape Vulnerability

According to its banner, the installed version of Serv-U is a version prior to 15.2.3 Hotfix 2. It is, therefore, affected memory escape vulnerability. An unauthenticated remote attacker who successfully exploited this vulnerability could run arbitrary code with privileges, which could then insta...

3 New Severe Security Vulnerabilities Found In SolarWinds Software

Cybersecurity researchers on Wednesday disclosed three severe security vulnerabilities impacting SolarWinds products, the most severe of which could have been exploited to achieve remote code execution with elevated privileges. Two of the flaws CVE-2021-25274 and CVE-2021-25275 were identified in...