NetSight
IP …
critical10.0Public exploit code

CVE-2004-2532

Serv-U FTP server before 5.1.0.0 has a default account and password for local administration, which allows local users to execute arbitrary commands by connect…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Serv-U FTP server before 5.1.0.0 has a default account and password for local administration, which allows local users to execute arbitrary commands by connecting to the server using the default administrator account, creating a new user, logging in as that new user, and then using the SITE EXEC command.

Affected products

VendorProductAffected versions
SolarwindsServ-U File Server
through 5.0.0.11
Versions 3.0.0.16, 3.0.0.17, 3.1.0.0, 3.1.0.1, 3.1.0.3

Weakness classification

CWE-255

References