CVE-2009-3655

Rhino Software Serv-U versions 7.0.0.1 through 8.2.0.3 are documented to allow remote denial-of-service (server crash) through the FTP command sequence involving SITE SET TRANSFERPROGRESS ON. This is described in multiple sources (e.g., NVD and OpenVAS plugins) as a DoS vulnerability affecting Se...

CVE-2009-3655: Undefined Security Weakness

Rhino Software Serv-U 7.0.0.1 through 8.2.0.3 allows remote attackers to cause a denial of service server crash via unspecified vectors related to the "SITE SET TRANSFERPROGRESS ON" FTP command...

Serv-U < 9.0.0.1

The installed version of Serv-U is earlier than 9.0.0.1 and as such is reportedly affected by following issues : - Provided 'SITE SET' command is enabled, an authorized user may be able to crash the remote FTP server by sending a specially crafted 'SITE SET TRANSFERPROGRESS ON' command. - An...

Serv-U < 9.0.0.1 Multiple Vulnerabilities

Binary data 5195.prm...

Serv-U 8 local provide right-vulnerability warning-the black bar safety net

See cnbeta found su 8 This version. Think before write a 7 local mention right. Don't know 8 what the security aspect of the change. Download to research, find actually can still provide the right, just su7 that can not be directly used, slightly modified the execution processes. Su8 Management...

serv-u8 本地提权漏洞

Su8的管理平台是http的，继承了su7的方式。 抓包，分析，发现了以下路程是可以利用的。 1， 管理员从管理控制台打开web页面时，是不需要验证密码的。 2， 管理员如果用某URL打开web页面时，虽然需要输入密码，但是无论输入什么，都可以进入。“/?Session=39893&Language=zh,CN&LocalAdmin=1” 3， 管理员可以添加用户有两种，一种是全局用户，一种是某个域下的用户。而权限设置也是两种，一种是全局，一种是针对用户。 4， 管理员添加了用户的这个包和设置权限这个包，是分开的。 所以，我可以抓包然后转换成php的socket连接post出去。...

Serv-U FTP Server v8 local mention right-vulnerability warning-the black bar safety net

Author: the emptiness of the prodigal son heart Release date:2009-08-05 Updated date:2009-08-05 Affected systems: serv-u8 Not affected system: Other versions are not affected Description: See cnbeta found su 8 This version. Think before write a 7 local mention right. Don't know 8 what the securit...

serv-u 7 local exp local overflow mention the right-vulnerability warning-the black bar safety net

? / serv-u 7 local exp ver 1.0 www.inbreak.net author [email protected] 2008-11-19 modify 2008-11-20 / / The following is the main data packet, for everyone to study. If you use asp and other languages and then written once and can reference. Global user list: GET /Admin/XML/OrganizationUsers...

Serv-U < 8.0.0.1 Multiple Vulnerabilities (DoS, Traversal)

Binary data 4979.prm...

Serv-U < 8.0.0.1 Multiple Vulnerabilities (DoS, Traversal)

The installed version of Serv-U is earlier than 8.0.0.1 and thus is reportedly affected by the following issues : - A directory traversal vulnerability enables an authenticated, remote attacker to create directories outside his or her home directory. CVE-2009-1031 - An authenticated, remote...

Rhinosoft Serv-U FTP Multiple Vulnerabilities

This host is running Serv-U FTP Server and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodservuftpservermultvuln.nasl 5122 2017-01-27 12:16:00Z teissa $ Rhinosoft Serv-U FTP Multiple Vulnerabilities Authors: Sujit Ghosal Copyright: Copyright c 2009 SecPod,...

Rhinosoft Serv-U FTP Multiple Vulnerabilities

Serv-U FTP Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Rhinosoft Serv-U FTP Server Version Detection

This script finds the installed Rhinosoft Serv-U FTP Server and saves the version in KB. OpenVAS Vulnerability Test $Id: secpodservuftpserverdetect.nasl 5372 2017-02-20 16:26:11Z cfi $ Rhinosoft Serv-U FTP Server Version Detection Authors: Sujit Ghosal Copyright: Copyright c 2009 SecPod,...

Rhinosoft Serv-U FTP Server Version Detection

This script finds the installed Rhinosoft Serv-U FTP Server. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...

Serv-U 7.4.0.1 (MKD) Create Arbitrary Directories Exploit-vulnerability warning-the black bar safety net

| Serv-U 7.4.0.1 MKD Create Arbitrary Directories Exploit --- !/ usr/bin/perl Soft : FTP Serv-U Version : v7. 4. 0. 1 Denial of Service in Serv-u up to 7.4.0.1 no crash Just the server is saturated, it stops responding. Author: Jonathan Salwan Mail: submit AT shell-storm.org Web:!...

Serv-U7 provide the right experience Essentials-vulnerability warning-the black bar safety net

Since the author is lazy, does not provide log cleanup feature, it will leave a log: One, the su7 is the right there are several? There are two forms to get rid of su7 in. 1, login to the Administrator Console page ==get the OrganizationId for Add User ==get the global user of the“next new user I...

Directory traversal

Directory traversal vulnerability in the FTP server in Rhino Software Serv-U File Server 7.0.0.1 through 7.4.0.1 allows remote attackers to create arbitrary directories via a .. backslash dot dot in an MKD request...

CVE-2009-1031

Directory traversal vulnerability in the FTP server in Rhino Software Serv-U File Server 7.0.0.1 through 7.4.0.1 allows remote attackers to create arbitrary directories via a .. backslash dot dot in an MKD request...

CVE-2009-1031: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the FTP server in Rhino Software Serv-U File Server 7.0.0.1 through 7.4.0.1 allows remote attackers to create arbitrary directories via a .. backslash dot dot in an MKD request...

CVE-2009-1031

The CVE-2009-1031 issue affects Rhino Software Serv-U File Server versions 7.0.0.1 through 7.4.0.1. The vulnerability is a directory traversal in the FTP server that allows an unauthenticated remote attacker to create arbitrary directories via a MKD request using a backslash-dot-dot sequence (..)...