critical10.0Public exploit code
CVE-2004-0330
Buffer overflow in Serv-U ftp before 5.0.0.4 allows remote authenticated users to execute arbitrary code via a long time zone argument to the MDTM command.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- RhinoSoft Serv-U FTPd Server 3/4/5 - MDTM Command Time Argument Buffer Overflow (4)2004-02-26 · remote · windows · Verified
- RhinoSoft Serv-U FTPd Server 3/4/5 - 'MDTM' Time Argument Buffer Overflow (3)2004-02-26 · dos · windows · Verified
- RhinoSoft Serv-U FTPd Server 3/4/5 - 'MDTM' Time Argument Buffer Overflow (2)2004-02-26 · dos · windows · Verified
- RhinoSoft Serv-U FTPd Server 3/4/5 - 'MDTM' Time Argument Buffer Overflow (1)2004-02-26 · dos · windows · Verified
- RhinoSoft Serv-U FTPd Server - MDTM Overflow (Metasploit)2010-09-20 · remote · windows · Verified
- RhinoSoft Serv-U FTPd Server 3.x/4.x/5.x - 'MDTM' Remote Overflow2004-02-27 · remote · windows · Verified
Impact
Buffer overflow in Serv-U ftp before 5.0.0.4 allows remote authenticated users to execute arbitrary code via a long time zone argument to the MDTM command.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Solarwinds | Serv-U File Server | through 5.0.0.0 Versions 3.0.0.16, 3.0.0.17, 3.1.0.0, 3.1.0.1, 3.1.0.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=107781164214399&w=2
- http://www.cnhonker.com/advisory/serv-u.mdtm.txt
- http://www.securityfocus.com/bid/9751
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15323
- http://marc.info/?l=bugtraq&m=107781164214399&w=2
- http://www.cnhonker.com/advisory/serv-u.mdtm.txt
- http://www.securityfocus.com/bid/9751
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15323