high8.5Public exploit code
CVE-2004-2111
Stack-based buffer overflow in the site chmod command in Serv-U FTP Server before 4.2 allows remote attackers to execute arbitrary code via a long filename.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- RhinoSoft Serv-U FTPd Server 3/4 - MDTM Command Stack Overflow (2)2004-01-25 · remote · windows · Verified
- RhinoSoft Serv-U FTPd Server 3/4 - MDTM Command Stack Overflow (1)2004-01-24 · remote · windows · Verified
- RhinoSoft Serv-U FTPd Server < 4.2 - Remote Buffer Overflow (Metasploit)2011-12-02 · remote · windows · Verified
- RhinoSoft Serv-U FTPd Server 4.x - 'site chmod' Remote Buffer Overflow2004-01-30 · remote · windows · Verified
- RhinoSoft Serv-U FTPd Server 3.x/4.x - 'SITE CHMOD' Remote Overflow2004-01-27 · remote · windows · Verified
Impact
Stack-based buffer overflow in the site chmod command in Serv-U FTP Server before 4.2 allows remote attackers to execute arbitrary code via a long filename.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Solarwinds | Serv-U File Server | through 4.1.0.3 Versions 3.0.0.16, 3.0.0.17, 3.1.0.0, 3.1.0.1, 3.1.0.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2004-01/0249.html
- http://marc.info/?l=bugtraq&m=107513654005840&w=2
- http://securitytracker.com/id?1008841
- http://www.securityfocus.com/bid/9483
- http://www.securityfocus.com/bid/9675
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14931
- http://archives.neohapsis.com/archives/bugtraq/2004-01/0249.html
- http://marc.info/?l=bugtraq&m=107513654005840&w=2
- http://securitytracker.com/id?1008841
- http://www.securityfocus.com/bid/9483
- http://www.securityfocus.com/bid/9675
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14931