Serv-U Version Detection

Serv-U File Server, an FTP server is listening on this port, and it is possible to determine its version. Note that thorough tests may have to be enabled to retrieve the full version. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid48434; scriptversion"1.16";...

Serv-U < 10.2.0.0

According to its banner, the installed version of Serv-U is earlier than 10.2.0.0 and is, therefore, potentially affected by the following issues : - It is possible to create a directory, when using virtual paths and various combinations of permissions, where the end-user does not have permission...

Serv-U < 10.2.0.0 Multiple Vulnerabilities

Binary data 5635.prm...

CVE-2009-4873

Stack-based buffer overflow in the HTTP server in Rhino Software Serv-U Web Client 9.0.0.5 allows remote attackers to cause a denial of service server crash or execute arbitrary code via a long Session cookie...

CVE-2009-4873

CVE-2009-4873 describes a stack-based buffer overflow in the HTTP server of Rhino Software Serv-U Web Client 9.0.0.5, exploitable via a long Session cookie to cause a denial of service or arbitrary code execution. Multiple connected sources confirm the vulnerability, with OpenVAS and Nessus notin...

CVE-2009-4873: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the HTTP server in Rhino Software Serv-U Web Client 9.0.0.5 allows remote attackers to cause a denial of service server crash or execute arbitrary code via a long Session cookie...

Directory traversal

Directory traversal vulnerability in Serv-U before 9.2.0.1 allows remote authenticated users to read arbitrary files via unspecified vectors...

CVE-2009-4815

Directory traversal vulnerability in Serv-U before 9.2.0.1 allows remote authenticated users to read arbitrary files via unspecified vectors...

CVE-2009-4815

Directory traversal vulnerability in Serv-U before 9.2.0.1 allows remote authenticated users to read arbitrary files via unspecified vectors...

CVE-2009-4815

CVE-2009-4815 concerns the Serv-U File Server. Multiple connected sources confirm an information-disclosure vulnerability in Serv-U prior to version 9.2.0.1, enabling an authenticated user to read files outside the user’s root directory (directory traversal). The issue is documented as affecting ...

CVE-2009-4815: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Serv-U before 9.2.0.1 allows remote authenticated users to read arbitrary files via unspecified vectors...

Serv-U < 9.4.0.0

According to its banner, the installed version of Serv-U is earlier than 9.4.0.0, and is, therefore, potentially affected by the following issues : - When importing users, restricted administrators could create user accounts outside their home directory. - When exporting users, restricted...

Serv-U < 9.4.0.0 Multiple Vulnerabilities

Binary data 5486.prm...

Serv-U Multiple Security Vulnerabilities

Serv-U is prone to multiple security vulnerabilities including security- bypass issues and a denial-of-service issue. Attackers can exploit this issue to bypass certain security restrictions or crash the affected application. Versions prior to Serv-U 9.4.0.0 are vulnerable. OpenVAS Vulnerability...

Serv-U Multiple Security Vulnerabilities

Serv-U is prone to multiple security vulnerabilities including security- bypass issues and a denial-of-service issue. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

RhinoSoft Serv-U FTP Server - Session Cookie Buffer Overflow (Metasploit)

$Id: servusessioncookie.rb 8762 2010-03-10 05:58:01Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Serv_U saved in the registry the password in the Read-vulnerability warning-the black bar safety net

In SERVU FTP mention the right vulnerability everyone familiar,I will not speak of these vulnerabilities,because we all know how to use,servu provide the right tools a lot,will not be described. Here just introduce the servu local solutions: 1. Modify the local SERVU passwordmany servers didn't...

Rhino Software Serv-U Web Client HTTP Request Remote Buffer Overflow

A code execution vulnerability exists in Rhino Software Serv-U. The vulnerability is due to a buffer overflow that can occur when Servu-U Web Client handles overly large HTTP requests. Remote attackers could exploit this vulnerability by sending a malicious HTTP request to a vulnerable version of...

Rhinosoft Serv-U Session Cookie Buffer Overflow

$Id: servusessioncookie.rb 7724 2009-12-06 05:50:37Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Serv-U File Server User Directory Information Disclosure Vulnerability

Serv-U File Server is prone to an unspecified information-disclosure vulnerability. Attackers can exploit this issue to harvest sensitive information that may lead to further attacks. Versions prior to SERV-U File Server 9.2.0.1 are vulnerable. OpenVAS Vulnerability Test $Id: servu37414.nasl 5148...