Serv-U DOS devices access

STOUD command allows to access DOS devices...

Serv-U up to 5.2 Denial of Service

Serv-U FTP server is a secure, advanced FTP server for Windows. However, like most programs, it is not completely bugfree. I and maybe more people with me found this bug some time ago. It can be triggered as every user that can log in, anonymous included, and exists in possibly every version. At...

RhinoSoft Serv-U FTP Server < 5.2 - Remote Denial of Service

/ denial of service in Serv-u up to 5.2 [email protected] - www.milw0rm.com Advisory: http://www.securitytracker.com/alerts/2004/Sep/1011219.html Ya its useless. / include include include include include include include define SERVERPORT 21 usagechar name printf"usage: %s -h hostname/ip -u user ...

Serv-U FTP Server < 5.2.0.1 'STOU' Command Remote DoS

Binary data 2275.prm...

Serv-U 4.x-5.x STOU Command MS-DOS Argument Remote DoS

It is possible to crash the remote FTP server by sending it a STOU command. An attacker could exploit this flaw to prevent users from sharing data through FTP, and may even crash this host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid14709; scriptversion"1.25";...

CVE-2004-1675

Serv-U FTP server 4.x and 5.x allows remote attackers to cause a denial of service application crash via a STORE UNIQUE STOU command with an MS-DOS device name argument such as 1 COM1, 2 LPT1, 3 PRN, or 4 AUX...

Serv-U FTP Server Detection

Binary data 1853.prm...

Serv-U FTP Server < 4.2 SITE CHMOD Command Handling Overflow

Binary data 1168.prm...

Serv-U < 2.5e CWD Command Path Disclosure

Binary data 1837.prm...

Serv-U < 2.5i CD Command Traversal Directory / File Access

Binary data 1838.prm...

Serv-U FTP Server Default Account

Binary data 2115.prm...

Serv-U privilege escalation

With SITE EXEC command from local interface it's possible to execute any command with system privileges...

Serv-U 3.x, 4.x, 5.x local privilege escalation

/ Hax0rcitos proudly presents Serv-u Local Exploit v3.x. tested also against last version 5.1.0.0 All Serv-u Versions have default Login/password for local Administration. This account is only available to connect in the loopback interface, so a local user will be able to connect to Serv-u with...

RhinoSoft Serv-U FTP Server 3.x 5.x - Local Privilege Escalation

RhinoSoft Serv-U FTP Server 3.x 5.x - Local Privilege Escalation / Hax0rcitos proudly presents Serv-u Local Exploit v3.x. tested also against last version 5.1.0.0 All Serv-u Versions have default Login/password for local Administration. This account is only available to connect in the loopback...

Serv-U 3x - 5.x Local Privilege Escalation Exploit

Exploit for unknown platform in category local exploits ================================================== Serv-U 3x - 5.x Local Privilege Escalation Exploit ================================================== / Hax0rcitos proudly presents Serv-u Local Exploit v3.x. tested also against last versio...

RhinoSoft Serv-U FTP Server 3.x < 5.x - Local Privilege Escalation

/ Hax0rcitos proudly presents Serv-u Local Exploit v3.x. tested also against last version 5.1.0.0 All Serv-u Versions have default Login/password for local Administration. This account is only available to connect in the loopback interface, so a local user will be able to connect to Serv-u with...

servuLIST.txt

Serv-U LIST -l Parameter Buffer Overflow ------------------------------------------------------------------------ Article reference: http://www.securiteam.com/windowsntfocus/5ZP0G2KCKA.html SUMMARY Serv-U is a "powerful, easy-to-use, award-winning FTP server" created by Rob Beckers. A vulnerabili...

CVE-2004-1992

Buffer overflow in Serv-U FTP server before 5.0.0.6 allows remote attackers to cause a denial of service crash via a long -l parameter, which triggers an out-of-bounds read...

Serv-U buffer overflow

Stack overflow in non-RFC 'chmod' and 'mdtm' and 'ls -l' commands...

[NT] Serv-U LIST -l Parameter Buffer Overflow

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...