33 matches found
CVE-2023-40060 2FA/MFA Bypass Vulnerability in Serv-U 15.4 and 15.4 Hotfix 1
A vulnerability has been identified within Serv-U 15.4 and 15.4 Hotfix 1 that, if exploited, allows an actor to bypass multi-factor/two-factor authentication. The actor must have administrator-level access to Serv-U to perform this action. 15.4. SolarWinds found that the issue was not completely...
PT-2023-27243 · Solarwinds · Serv-U
Name of the Vulnerable Software and Affected Versions: Serv-U versions 15.4 through 15.4 Hotfix 1 Description: A vulnerability has been identified that allows an actor to bypass multi-factor/two-factor authentication if exploited. The actor must have administrator-level access to Serv-U to perfor...
PT-2023-25189 · Serv-U · Serv-U
Name of the Vulnerable Software and Affected Versions: Serv-U version 15.4 Description: A vulnerability has been identified that allows an actor to bypass multi-factor or two-factor authentication. The actor must have administrator-level access to perform this action. Recommendations: For Serv-U...
PT-2022-10453 · Solarwinds · Serv-U
Name of the Vulnerable Software and Affected Versions: Serv-U versions 15.3.0.X through 15.3.0.X before Hotfix 1 Serv-U version 15.3 Description: A researcher reported a Directory Transversal issue in Serv-U. This may allow access to files relating to the Serv-U installation and server files. The...
SolarWinds Serv-U vulnerability exploited to deliver Log4j attack
THREAT LEVEL: Red. For a detailed advisory, download the pdf file here. SolarWinds is affected by a vulnerability CVE-2021-35247 due to improper input validation when processing LDAP queries in the Serv-U web login screen. Serv-U versions up to 15.2.5 are affected by this flaw and were fixed in...
PT-2021-3760
Name of the Vulnerable Software and Affected Versions SolarWinds Serv-U Managed File Transfer and Serv-U Secure FTP for Windows versions prior to 15.2.3 HF2 Description A remote code execution vulnerability in the SolarWinds Serv-U product allows a threat actor to gain privileged access to the...
Serv-U < 2.5i CD Command Traversal Directory / File Access
Binary data 1838.prm...
Serv-U < 2.5e CWD Command Path Disclosure
Binary data 1837.prm...
Serv-U buffer overflow
Stack overflow in non-RFC 'chmod' and 'mdtm' and 'ls -l' commands...
[NT] Serv-U LIST -l Parameter Buffer Overflow
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
[Full-Disclosure] [vulnwatch] Serv-U MDTM Command Buffer Overflow Vulnerability
vulnwatch Serv-U MDTM Command Buffer Overflow Vulnerability www.cnhonker.com Security Advisory Advisory Name: Serv-U MDTM Command Buffer Overflow Vulnerability Release Date: 02/26/2004 Affected version: Serv-U 5.0.0.4 Author: bkbll [email protected] URL:...
[Full-Disclosure] Serv-U 4.1 Memory Corruption / Whatever
Well, I didn't have the time to fully analyze it yet, but by using a fuzzer to check Serv-U, I found something that crashed it using bad data in SITE CHMOD. This is not the already discovered vulnerability, cause it can be used without write access, the crash occurs before permissions are even...