NetSight
IP …
critical9.0Public exploit code

CVE-2008-4501

Directory traversal vulnerability in the FTP server in Serv-U 7.0.0.1 through 7.3, including 7.2.0.1, allows remote authenticated users to overwrite or create …

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Directory traversal vulnerability in the FTP server in Serv-U 7.0.0.1 through 7.3, including 7.2.0.1, allows remote authenticated users to overwrite or create arbitrary files via a ..\ (dot dot backslash) in the RNTO command.

Affected products

VendorProductAffected versions
SolarwindsServ-U File Server
Versions 7.0.0.1, 7.0.0.2, 7.0.0.3, 7.0.0.4, 7.1.0.0, 7.1.0.1

Weakness classification

CWE-22

References