medium5.0Public exploit code
CVE-2004-1675
Serv-U FTP server 4.x and 5.x allows remote attackers to cause a denial of service (application crash) via a STORE UNIQUE (STOU) command with an MS-DOS device …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- RhinoSoft Serv-U FTP Server < 5.2 - Remote Denial of Service2004-09-13 · dos · windows · Verified
Impact
Serv-U FTP server 4.x and 5.x allows remote attackers to cause a denial of service (application crash) via a STORE UNIQUE (STOU) command with an MS-DOS device name argument such as (1) COM1, (2) LPT1, (3) PRN, or (4) AUX.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Solarwinds | Serv-U File Server | Versions 4.0.0.4, 4.1.0.0, 4.1.0.3, 5.0.0.0, 5.0.0.4, 5.0.0.9 |
Weakness classification
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=109495074211638&w=2
- http://secunia.com/advisories/12507/
- http://www.securityfocus.com/bid/11155
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17329
- http://marc.info/?l=bugtraq&m=109495074211638&w=2
- http://secunia.com/advisories/12507/
- http://www.securityfocus.com/bid/11155
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17329