2667 matches found
CVE-2008-4501
Directory traversal vulnerability in the FTP server in Serv-U 7.0.0.1 through 7.3, including 7.2.0.1, allows remote authenticated users to overwrite or create arbitrary files via a ..\ dot dot backslash in the RNTO command...
CVE-2008-4500
CVE-2008-4500 affects Serv-U 7.0.0.1 through 7.3 (including 7.2.0.1). A remote authenticated user can cause a denial of service by issuing a crafted STOU command (notably with devices named like “con:1”), leading to CPU consumption. The issue is tied to handling of MS‑DOS device names in STOU. Ex...
CVE-2008-4501
CVE-2008-4501 affects Rhino Software’s Serv-U FTP Server (versions 7.0.0.1–7.3, including 7.2.0.1). A directory traversal flaw in RNTO, caused by improper input validation, allows an authenticated remote user to overwrite or create arbitrary files on the server. Several advisories describe potent...
RhinoSoft Serv-U FTP Server 'rnto'命令目录遍历漏洞
BUGTRAQ ID: 31563 CNCAN ID：CNCAN-2008100610 RhinoSoft Serv-U FTP Server是一款流行的FTP服务程序。 Serv-U FTP Server不正确处理'rnto'命令，远程攻击者可以利用漏洞以应用程序权限查看系统文件内容。 'rnto'命令不正确过滤输入，构建包含"../"字符的字符串作为参数，可绕过目录限制，以应用程序权限查看系统文件内容。 RhinoSoft Serv-U 7.2.1 目前没有解决方案提供： http://www.serv-u.com/ http://www.sebug.net/exploit/4803...
Serv-U < 7.3.0.1 Multiple Remote Vulnerabilities
Binary data 4699.prm...
Serv-U 7.2.0.1 (stou con:1) Denial of Service Vulnerability (auth)
No description provided by source. Serv-U 7.2.0.1 ftp server DoS user must have upload permissions x dmnt 2008-10-01 220 Serv-U FTP Server v7.2 ready... user test 331 User name okay, need password. pass test 230 User logged in, proceed. stou con:1 quit 221 Goodbye, closing session. now server DoS...
Serv-U <= 7.3 Remote FTP File Replacement Vulnerability (auth)
No description provided by source. Serv-U = 7.2.0.1 / 7.3 ftp file replacement user must have upload permissions x dmnt 2008-10-01 220 Serv-U FTP Server v7.3 ready... user test 331 User name okay, need password. pass test 230 User logged in, proceed. rnfr anyexistfile.ext 350 File or directory...
Serv-U FTP Server 7.3 - (Authenticated) Remote FTP File Replacement
Serv-U FTP Server 7.3 - Authenticated Remote FTP File Replacement Serv-U = 7.2.0.1 / 7.3 ftp file replacement user must have upload permissions x dmnt 2008-10-01 220 Serv-U FTP Server v7.3 ready... user test 331 User name okay, need password. pass test 230 User logged in, proceed. rnfr...
servu72-upload.txt
Serv-U 7.2.0.1 ftp file replacement user must have upload permissions x dmnt 2008-10-01 220 Serv-U FTP Server v7.2 ready... user test 331 User name okay, need password. pass test 230 User logged in, proceed. rnfr anyexistfile.ext 350 File or directory exists, ready for destination name. rnto...
servu72-dos.txt
Serv-U 7.2.0.1 ftp server DoS user must have upload permissions x dmnt 2008-10-01 220 Serv-U FTP Server v7.2 ready... user test 331 User name okay, need password. pass test 230 User logged in, proceed. stou con:1 quit 221 Goodbye, closing session. now server DoS'ed...
RhinoSoft Serv-U FTP Server 7.3 - (Authenticated) stou con:1 Denial of Service
RhinoSoft Serv-U FTP Server 7.3 - Authenticated stou con:1 Denial of Service Serv-U = 7.2.0.1 / 7.3 ftp server DoS user must have upload permissions x dmnt 2008-10-01 220 Serv-U FTP Server v7.3 ready... user test 331 User name okay, need password. pass test 230 User logged in, proceed. stou con:1...
Serv-U <= 7.3 (stou con:1) Denial of Service Vulnerability (auth)
No description provided by source. Serv-U = 7.2.0.1 / 7.3 ftp server DoS user must have upload permissions x dmnt 2008-10-01 220 Serv-U FTP Server v7.3 ready... user test 331 User name okay, need password. pass test 230 User logged in, proceed. stou con:1 quit 221 Goodbye, closing session. now...
Serv-U <= 7.3 (stou con:1) Denial of Service Vulnerability (auth)
Exploit for unknown platform in category dos / poc ================================================================= Serv-U = 7.3 stou con:1 Denial of Service Vulnerability auth ================================================================= Serv-U = 7.2.0.1 / 7.3 ftp server DoS user must have...
RhinoSoft Serv-U FTP Server 7.2.0.1 - rnto Directory Traversal
RhinoSoft Serv-U FTP Server 7.2.0.1 - rnto Directory Traversal source: https://www.securityfocus.com/bid/31563/info RhinoSoft Serv-U FTP server is prone to a directory-traversal vulnerability because the application fails to sufficiently sanitize user-supplied input. Exploiting this issue allows ...
Serv-U 7.2.0.1 Remote FTP File Replacement Vulnerability (auth)
No description provided by source. Serv-U 7.2.0.1 ftp file replacement user must have upload permissions x dmnt 2008-10-01 220 Serv-U FTP Server v7.2 ready... user test 331 User name okay, need password. pass test 230 User logged in, proceed. rnfr anyexistfile.ext 350 File or directory exists,...
Serv-U <= 7.3 Remote FTP File Replacement Vulnerability (auth)
Exploit for unknown platform in category remote exploits ============================================================== Serv-U = 7.3 Remote FTP File Replacement Vulnerability auth ============================================================== Serv-U = 7.2.0.1 / 7.3 ftp file replacement user must...
Serv-U FTP Server 7.3 - (Authenticated) Remote FTP File Replacement
Serv-U = 7.2.0.1 / 7.3 ftp file replacement user must have upload permissions x dmnt 2008-10-01 220 Serv-U FTP Server v7.3 ready... user test 331 User name okay, need password. pass test 230 User logged in, proceed. rnfr anyexistfile.ext 350 File or directory exists, ready for destination name...
RhinoSoft Serv-U FTP Server 7.2.0.1 - 'rnto' Directory Traversal
source: https://www.securityfocus.com/bid/31563/info RhinoSoft Serv-U FTP server is prone to a directory-traversal vulnerability because the application fails to sufficiently sanitize user-supplied input. Exploiting this issue allows an attacker to write arbitrary files to locations outside of th...
RhinoSoft Serv-U FTP Server 7.3 - (Authenticated) 'stou con:1' Denial of Service
Serv-U = 7.2.0.1 / 7.3 ftp server DoS user must have upload permissions x dmnt 2008-10-01 220 Serv-U FTP Server v7.3 ready... user test 331 User name okay, need password. pass test 230 User logged in, proceed. stou con:1 quit 221 Goodbye, closing session. now server DoS'ed milw0rm.com 2008-10-03...
Serv-u to establish a secure and hidden accounts-vulnerability warning-the black bar safety net
When your meat machine and installed SERV-U, you can use the following method to establish a hidden account First confirm that the SERV-U installed and can run correctly. Here is a SERV-U extensions, must be installed in the SERV-U3. 0 version of the above! This pack contains a total 4 files...