Serv-U 4.x-5.x STOU Command MS-DOS Argument Remote DoS

It is possible to crash the remote FTP server by sending it a STOU command. An attacker could exploit this flaw to prevent users from sharing data through FTP, and may even crash this host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid14709; scriptversion"1.25";...

CVE-2004-1675

Serv-U FTP server 4.x and 5.x allows remote attackers to cause a denial of service application crash via a STORE UNIQUE STOU command with an MS-DOS device name argument such as 1 COM1, 2 LPT1, 3 PRN, or 4 AUX...

Serv-U FTP Server < 4.2 SITE CHMOD Command Handling Overflow

Binary data 1168.prm...

Serv-U < 2.5e CWD Command Path Disclosure

Binary data 1837.prm...

Serv-U FTP Server Detection

Binary data 1853.prm...

Serv-U < 2.5i CD Command Traversal Directory / File Access

Binary data 1838.prm...

Serv-U FTP Server Default Account

Binary data 2115.prm...

Serv-U privilege escalation

With SITE EXEC command from local interface it's possible to execute any command with system privileges...

Serv-U 3.x, 4.x, 5.x local privilege escalation

/ Hax0rcitos proudly presents Serv-u Local Exploit v3.x. tested also against last version 5.1.0.0 All Serv-u Versions have default Login/password for local Administration. This account is only available to connect in the loopback interface, so a local user will be able to connect to Serv-u with...

Serv-U 3x - 5.x Local Privilege Escalation Exploit

Exploit for unknown platform in category local exploits ================================================== Serv-U 3x - 5.x Local Privilege Escalation Exploit ================================================== / Hax0rcitos proudly presents Serv-u Local Exploit v3.x. tested also against last versio...

RhinoSoft Serv-U FTP Server 3.x 5.x - Local Privilege Escalation

RhinoSoft Serv-U FTP Server 3.x 5.x - Local Privilege Escalation / Hax0rcitos proudly presents Serv-u Local Exploit v3.x. tested also against last version 5.1.0.0 All Serv-u Versions have default Login/password for local Administration. This account is only available to connect in the loopback...

RhinoSoft Serv-U FTP Server 3.x < 5.x - Local Privilege Escalation

/ Hax0rcitos proudly presents Serv-u Local Exploit v3.x. tested also against last version 5.1.0.0 All Serv-u Versions have default Login/password for local Administration. This account is only available to connect in the loopback interface, so a local user will be able to connect to Serv-u with...

servuLIST.txt

Serv-U LIST -l Parameter Buffer Overflow ------------------------------------------------------------------------ Article reference: http://www.securiteam.com/windowsntfocus/5ZP0G2KCKA.html SUMMARY Serv-U is a "powerful, easy-to-use, award-winning FTP server" created by Rob Beckers. A vulnerabili...

CVE-2004-1992

Buffer overflow in Serv-U FTP server before 5.0.0.6 allows remote attackers to cause a denial of service crash via a long -l parameter, which triggers an out-of-bounds read...

[NT] Serv-U LIST -l Parameter Buffer Overflow

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Serv-U buffer overflow

Stack overflow in non-RFC 'chmod' and 'mdtm' and 'ls -l' commands...

CVE-2004-0330

Buffer overflow in Serv-U ftp before 5.0.0.4 allows remote authenticated users to execute arbitrary code via a long time zone argument to the MDTM command...

CVE-2004-0330

CVE-2004-0330 is a buffer overflow in the MDTM handling of Serv-U FTP Server (pre-5.0.0.4). The vulnerability allows remote authenticated attackers to execute arbitrary code by sending a crafted MDTM timezone parameter. Public references show exploitation tooling and disclosures (Metasploit modul...

CVE-2004-0330: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Serv-U ftp before 5.0.0.4 allows remote authenticated users to execute arbitrary code via a long time zone argument to the MDTM command...

Serv-U FTPD 3.x/4.x/5.x (MDTM) Remote Overflow Exploit

Exploit for unknown platform in category remote exploits ====================================================== Serv-U FTPD 3.x/4.x/5.x MDTM Remote Overflow Exploit ====================================================== / exservu.c - Serv-U FTPD 3.x/4.x/5.x "MDTM" Command remote overflow exploit...