NetSight
IP …
medium4.0Public exploit code

CVE-2008-4500

Serv-U 7.0.0.1 through 7.3, including 7.2.0.1, allows remote authenticated users to cause a denial of service (CPU consumption) via a crafted stou command, pro…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Serv-U 7.0.0.1 through 7.3, including 7.2.0.1, allows remote authenticated users to cause a denial of service (CPU consumption) via a crafted stou command, probably related to MS-DOS device names, as demonstrated using "con:1".

Affected products

VendorProductAffected versions
SolarwindsServ-U File Server
Versions 7.0.0.1, 7.0.0.2, 7.0.0.3, 7.0.0.4, 7.1.0.0, 7.1.0.1

Weakness classification

CWE-20

References