993 matches found
Update Protection against Rhino Software Serv-U FTP Server RNTO Command Directory Traversal
A directory traversal vulnerability was reported in Serv-U FTP Server. Serv-U is a widely-used FTP server that includes advanced features such as SSL support, ODBC, virtual directories and more. This vulnerability allows a remote authenticated attacker to access normally-inaccessible files and...
Serv-U <= 7.3 Remote FTP File replacement vulnerability-vulnerability warning-the black bar safety net
http://princeb4d.com/Blogs/bugs/200810/20081011095232.Html Serv-U = 7.2.0.1 / 7.3 ftp file replacement user must have upload permissions x dmnt 2008-10-01 2 2 0 Serv-U FTP Server v7. 3 ready... user test 3 3 1 User name okay, need password. pass the test 2 3 0 User logged in, proceed. rnfr...
Serv-U File Renaming Directory Traversal and 'STOU' DoS Vulnerabilities
Serv-U FTP Server is prone to directory traversal and denial of service DoS vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Serv-U 7.x < 7.3.0.1 Multiple Remote Vulnerabilities (DoS, Traversal)
The installed version of Serv-U 7.x is earlier than 7.3.0.1 and thus is reportedly affected by the following issues : - An authenticated, remote attacker can cause the service to consume all CPU time on the remote host by specifying a Windows port eg, 'CON:' when using the STOU command provided h...
Serv-U File Renaming Directory Traversal and 'STOU' DoS Vulnerabilities
The host is running Serv-U FTP Server, which is prone to Directory Traversal and Denial of Service Vulnerabilities. The flaws are due to, - error in handling 'STOU' FTP command. It can exhaust available CPU resources when exploited through a specially crafted argument vaule. - input validation...
CVE-2008-4500
Serv-U 7.0.0.1 through 7.3, including 7.2.0.1, allows remote authenticated users to cause a denial of service CPU consumption via a crafted stou command, probably related to MS-DOS device names, as demonstrated using "con:1"...
CVE-2008-4501
Directory traversal vulnerability in the FTP server in Serv-U 7.0.0.1 through 7.3, including 7.2.0.1, allows remote authenticated users to overwrite or create arbitrary files via a ..\ dot dot backslash in the RNTO command...
Directory traversal
Directory traversal vulnerability in the FTP server in Serv-U 7.0.0.1 through 7.3, including 7.2.0.1, allows remote authenticated users to overwrite or create arbitrary files via a ..\ dot dot backslash in the RNTO command...
CVE-2008-4501
Directory traversal vulnerability in the FTP server in Serv-U 7.0.0.1 through 7.3, including 7.2.0.1, allows remote authenticated users to overwrite or create arbitrary files via a ..\ dot dot backslash in the RNTO command...
CVE-2008-4500
Serv-U 7.0.0.1 through 7.3, including 7.2.0.1, allows remote authenticated users to cause a denial of service CPU consumption via a crafted stou command, probably related to MS-DOS device names, as demonstrated using "con:1"...
CVE-2008-4500
CVE-2008-4500 affects Serv-U 7.0.0.1 through 7.3 (including 7.2.0.1). A remote authenticated user can cause a denial of service by issuing a crafted STOU command (notably with devices named like “con:1”), leading to CPU consumption. The issue is tied to handling of MS‑DOS device names in STOU. Ex...
CVE-2008-4501
CVE-2008-4501 affects Rhino Software’s Serv-U FTP Server (versions 7.0.0.1–7.3, including 7.2.0.1). A directory traversal flaw in RNTO, caused by improper input validation, allows an authenticated remote user to overwrite or create arbitrary files on the server. Several advisories describe potent...
RhinoSoft Serv-U FTP Server 'rnto'命令目录遍历漏洞
BUGTRAQ ID: 31563 CNCAN ID：CNCAN-2008100610 RhinoSoft Serv-U FTP Server是一款流行的FTP服务程序。 Serv-U FTP Server不正确处理'rnto'命令，远程攻击者可以利用漏洞以应用程序权限查看系统文件内容。 'rnto'命令不正确过滤输入，构建包含"../"字符的字符串作为参数，可绕过目录限制，以应用程序权限查看系统文件内容。 RhinoSoft Serv-U 7.2.1 目前没有解决方案提供： http://www.serv-u.com/ http://www.sebug.net/exploit/4803...
Serv-U < 7.3.0.1 Multiple Remote Vulnerabilities
Binary data 4699.prm...
servu72-upload.txt
Serv-U 7.2.0.1 ftp file replacement user must have upload permissions x dmnt 2008-10-01 220 Serv-U FTP Server v7.2 ready... user test 331 User name okay, need password. pass test 230 User logged in, proceed. rnfr anyexistfile.ext 350 File or directory exists, ready for destination name. rnto...
Serv-U <= 7.3 Remote FTP File Replacement Vulnerability (auth)
Exploit for unknown platform in category remote exploits ============================================================== Serv-U = 7.3 Remote FTP File Replacement Vulnerability auth ============================================================== Serv-U = 7.2.0.1 / 7.3 ftp file replacement user must...
Serv-U <= 7.3 Remote FTP File Replacement Vulnerability (auth)
No description provided by source. Serv-U = 7.2.0.1 / 7.3 ftp file replacement user must have upload permissions x dmnt 2008-10-01 220 Serv-U FTP Server v7.3 ready... user test 331 User name okay, need password. pass test 230 User logged in, proceed. rnfr anyexistfile.ext 350 File or directory...
Serv-U <= 7.3 (stou con:1) Denial of Service Vulnerability (auth)
Exploit for unknown platform in category dos / poc ================================================================= Serv-U = 7.3 stou con:1 Denial of Service Vulnerability auth ================================================================= Serv-U = 7.2.0.1 / 7.3 ftp server DoS user must have...
Serv-U FTP Server 7.3 - (Authenticated) Remote FTP File Replacement
Serv-U = 7.2.0.1 / 7.3 ftp file replacement user must have upload permissions x dmnt 2008-10-01 220 Serv-U FTP Server v7.3 ready... user test 331 User name okay, need password. pass test 230 User logged in, proceed. rnfr anyexistfile.ext 350 File or directory exists, ready for destination name...
Serv-U 7.2.0.1 (stou con:1) Denial of Service Vulnerability (auth)
No description provided by source. Serv-U 7.2.0.1 ftp server DoS user must have upload permissions x dmnt 2008-10-01 220 Serv-U FTP Server v7.2 ready... user test 331 User name okay, need password. pass test 230 User logged in, proceed. stou con:1 quit 221 Goodbye, closing session. now server DoS...